3 function add_user($user_id, $real_name, $password, $phone, $email, $full_access,
6 $sql = "INSERT INTO ".TB_PREF."users (user_id, real_name, password, phone, email, full_access, language, print_profile)
7 VALUES (".db_escape($user_id).",
8 ".db_escape($real_name).", ".db_escape($password) .",".db_escape($phone).",
9 ".db_escape($email).", $full_access, ".db_escape($language).",
10 ".db_escape($profile).")";
12 db_query($sql, "could not add user for $user_id");
15 //-----------------------------------------------------------------------------------------------
17 function update_user_password($user_id, $password)
19 $sql = "UPDATE ".TB_PREF."users SET password=".db_escape($password) . "
20 WHERE user_id = ".db_escape($user_id);
22 db_query($sql, "could not update user password for $user_id");
25 //-----------------------------------------------------------------------------------------------
27 function update_user($user_id, $real_name, $phone, $email, $full_access,
30 $sql = "UPDATE ".TB_PREF."users SET real_name=".db_escape($real_name).
31 ", phone=".db_escape($phone).",
32 email=".db_escape($email).",
33 full_access=$full_access,
34 language=".db_escape($language).",
35 print_profile=".db_escape($profile)."
36 WHERE user_id = ".db_escape($user_id);
37 db_query($sql, "could not update user for $user_id");
40 //-----------------------------------------------------------------------------------------------
42 function update_user_display_prefs($user_id, $price_dec, $qty_dec, $exrate_dec, $percent_dec, $showgl,
43 $showcodes, $date_format, $date_sep, $tho_sep, $dec_sep, $theme, $pagesize, $show_hints, $profile)
45 $sql = "UPDATE ".TB_PREF."users SET
46 prices_dec=".db_escape($price_dec).",
47 qty_dec=".db_escape($qty_dec).",
48 rates_dec=".db_escape($exrate_dec).",
49 percent_dec=".db_escape($percent_dec).",
50 show_gl=".db_escape($showgl).",
51 show_codes=".db_escape($showcodes).",
52 date_format=".db_escape($date_format).",
53 date_sep=".db_escape($date_sep).",
54 tho_sep=".db_escape($tho_sep).",
55 dec_sep=".db_escape($dec_sep).",
56 theme=".db_escape($theme).",
57 page_size=".db_escape($pagesize).",
58 show_hints=$show_hints,
59 print_profile=".db_escape($profile)."
60 WHERE user_id = ".db_escape($user_id);
62 db_query($sql, "could not update user display prefs for $user_id");
65 //-----------------------------------------------------------------------------------------------
70 $sql = "SELECT * FROM ".TB_PREF."users";
72 return db_query($sql, "could not get users");
75 //-----------------------------------------------------------------------------------------------
77 function get_user($user_id)
79 $sql = "SELECT * FROM ".TB_PREF."users WHERE user_id = '$user_id'";
81 $result = db_query($sql, "could not get user for $user_id");
83 return db_fetch($result);
86 //-----------------------------------------------------------------------------------------------
88 function delete_user($user_id)
90 $sql="DELETE FROM ".TB_PREF."users WHERE user_id='$user_id'";
92 db_query($sql, "could not delete user $user_id");
95 //-----------------------------------------------------------------------------------------------
97 function get_user_for_login($user_id, $password)
99 set_global_connection();
101 $sql = "SELECT * FROM ".TB_PREF."users WHERE user_id = '$user_id' AND password='$password'";
103 return db_query($sql, "could not get validate user login for $user_id");
106 //-----------------------------------------------------------------------------------------------
108 function update_user_visitdate($user_id)
110 $sql = "UPDATE ".TB_PREF."users SET last_visit_date='". date("Y-m-d H:i:s") ."'
111 WHERE user_id=".db_escape($user_id);
113 db_query($sql, "could not update last visit date for user $user_id");
116 //-----------------------------------------------------------------------------------------------