Assistance required in user management

[busnut]

G'day all, I was wondering if anybody is able to assist me in a project I am trying to do for a non-profit society that I am a member of.

I have been searching the web for either a php/flatfile or php/mysql membership/login/admin script.

I've came across a couple of ones that I like, but have found that with my very limited experience in especially the field of mysql, that I can't seem to work out how to add additional fields or more so get the data to stay.

One I extremely like which I found is from the codewalkers website.

What I like about this script is that I can limit the script so only 'admin' can register users only, but what I am wanting it to do is to have several more fields of data about the user and also rather than just having 'non-admin' and 'admin', I also want to create another type of 'committee' or semi-admin if you would like, so that way such people can view abit more than the non-admin user, but not have as much functionality as an 'admin' does.

The additional fields I want are:
Name, Address, Phone, Mobile, Renewal

Hopefully from there I should be able to use other bits of code i've got and have used in the past to do the rest of what I need to do.

So any help is appreciated, or if anybody knows of such a free script that provides what i'm looking for would also be appreciated, and if its inclussion is mysql, then thats fine, but the only problem is I have no idea how to generate reports from a mysql database yet.

As I mentioned earlier, its for a non-profit society that deals with history & preservation of buses.

Thankyou for your time.

[djjjozsi]

Lets see this:

http://www.phpcode.hu/teszt/collabora_system.rar
an admin site administration program, (i had make that now, so it might has mistakes, but you could check them.)

you could start with this script i think.

the sql table maker txt is in the file.

busnut;10891087 wrote:

G'day all, I was wondering if anybody is able to assist me in a project I am trying to do for a non-profit society that I am a member of.

I have been searching the web for either a php/flatfile or php/mysql membership/login/admin script.

I've came across a couple of ones that I like, but have found that with my very limited experience in especially the field of mysql, that I can't seem to work out how to add additional fields or more so get the data to stay.

One I extremely like which I found is from the codewalkers website.

What I like about this script is that I can limit the script so only 'admin' can register users only, but what I am wanting it to do is to have several more fields of data about the user and also rather than just having 'non-admin' and 'admin', I also want to create another type of 'committee' or semi-admin if you would like, so that way such people can view abit more than the non-admin user, but not have as much functionality as an 'admin' does.

The additional fields I want are:
Name, Address, Phone, Mobile, Renewal

Hopefully from there I should be able to use other bits of code i've got and have used in the past to do the rest of what I need to do.

So any help is appreciated, or if anybody knows of such a free script that provides what i'm looking for would also be appreciated, and if its inclussion is mysql, then thats fine, but the only problem is I have no idea how to generate reports from a mysql database yet.

As I mentioned earlier, its for a non-profit society that deals with history & preservation of buses.

Thankyou for your time.

[busnut]

Hi, thanks for the script 'djjjozsi'.

It sorta works and sorta doesn't.
Adding admin isn't a problem, just can't seem to login as admin, but know the information was added to the db as are they do display when going to add another admin and also in the phpmyadmin screen.

Adding users comes up with a 'unexpectant end' message. Rectified that which then removed that message, and once adding the new users details the page goes to 'added.php' and doesn't actually add anything to the database.

As for the 'fields' for the user, that is brilliant, although if it is easier, that rather than having a table for 'users' and 'admin' that the users table just has another field titled 'permission' so that the admin selects say '1' for standard, '2' for subadmin and '3' for full admin should surfice there. Saves a table and also saves a user having to have 2 types of logins (although could be the same, just in different tables).

But here is the weird one though before i forget, when i went to add a 'user' or 'add admin', the page retains some of the information of the previous user from the previous time of adding.

But it is along the lines of what i'm requiring, just not entirely sure how to do this side of stuff to get it to the end result. Requires a login page so that just no one can add, although thats probably another step or two away yet...

Also forgot to mention, anybody who assists in this project is more than welcome to having their name displayed on the society website once completed for their assistance. Just fair really to acknowledge those who have been able to assist.

Thanks once again, and welcome any assistance in this project.

[djjjozsi]

Its just a beta of course...

and had not time to test.

in the folders, you must set the connect.php.

And i could help to make the users table with the field permission

And then, what's type of a fields needed in that table, which for a collaborate editing ?

busnut;10891104 wrote:

Hi, thanks for the script 'djjjozsi'.

It sorta works and sorta doesn't.
Adding admin isn't a problem, just can't seem to login as admin, but know the information was added to the db as are they do display when going to add another admin and also in the phpmyadmin screen.

Adding users comes up with a 'unexpectant end' message. Rectified that which then removed that message, and once adding the new users details the page goes to 'added.php' and doesn't actually add anything to the database.

As for the 'fields' for the user, that is brilliant, although if it is easier, that rather than having a table for 'users' and 'admin' that the users table just has another field titled 'permission' so that the admin selects say '1' for standard, '2' for subadmin and '3' for full admin should surfice there. Saves a table and also saves a user having to have 2 types of logins (although could be the same, just in different tables).

But here is the weird one though before i forget, when i went to add a 'user' or 'add admin', the page retains some of the information of the previous user from the previous time of adding.

But it is along the lines of what i'm requiring, just not entirely sure how to do this side of stuff to get it to the end result. Requires a login page so that just no one can add, although thats probably another step or two away yet...

Also forgot to mention, anybody who assists in this project is more than welcome to having their name displayed on the society website once completed for their assistance. Just fair really to acknowledge those who have been able to assist.

Thanks once again, and welcome any assistance in this project.

[busnut]

G'day, thanks for responding quickly.

I'm not sure what this means sorry "And then, what's type of a fields needed in that table, which for a collaborate editing ?"

Is this in reference to numeric or password or text type of thing of field types? (sorry, I really am a beginner to mysql).

With reference to the 'connect.php' files, uploaded files and then discovered that the file was in each directory, so edited & reuploaded so I didn't have any mysql error messages at least.

[djjjozsi]

I'm not sure what this means sorry "And then, what's type of a fields needed in that table, which for a collaborate editing ?"
you can do a username management with that program, but why do a username enter into this site?

What kind of another programs needed into that program.

[busnut]

Gday

One that a user logs in and can edit their details and see links that are assigned to a user with the permission of 1, but if a user with the permission of 2 or 3 will see even more links if that makes any sense, where by a user with the permission of 3 will have all access to add/edit/delete users.

Unfortunately I seem to fail miserably in trying to explain myself, so below is roughly the layout of what im looking for. Its more so that is just one logon script for all, but it depends on their permission status as to what they see.

login screen is where the user would enter username & password

if login failed, then display error message so that they can try again or select the 'forget me feature' where they would enter their email address to have their password sent to them.

if login is confirmed, if permission is at 1, then display:
edit your details
view meeting minutes

if permission is at 2, then display:
edit your details
view meeting minutes
view committee meeting minutes

if permission is at 3, then display:
edit your details
view meeting minutes
view committee meeting minutes
add user
edit user
delete user
and other links associated with permission 1 & 2 & 3.

I'm hoping that makes a fraction more sense.

I do have some other things to add in the future, like mailing list of the users, but just trying to get the first stage completed to start with.

[djjjozsi]

Hello,
that will ok.

Admins with permission 3 could add sites to the system, they are .php files, with the functions. And could include a permission level (1 cant's see that.)

busnut;10891148 wrote:

Gday

One that a user logs in and can edit their details and see links that are assigned to a user with the permission of 1, but if a user with the permission of 2 or 3 will see even more links if that makes any sense, where by a user with the permission of 3 will have all access to add/edit/delete users.

Unfortunately I seem to fail miserably in trying to explain myself, so below is roughly the layout of what im looking for. Its more so that is just one logon script for all, but it depends on their permission status as to what they see.

login screen is where the user would enter username & password

if login failed, then display error message so that they can try again or select the 'forget me feature' where they would enter their email address to have their password sent to them.

if login is confirmed, if permission is at 1, then display:
edit your details
view meeting minutes

if permission is at 2, then display:
edit your details
view meeting minutes
view committee meeting minutes

if permission is at 3, then display:
edit your details
view meeting minutes
view committee meeting minutes
add user
edit user
delete user
and other links associated with permission 1 & 2 & 3.

I'm hoping that makes a fraction more sense.

I do have some other things to add in the future, like mailing list of the users, but just trying to get the first stage completed to start with.

[busnut]

G'day

I tried playing with the scripts that were originally sent, and have failed trying to do some of the basics to help where I can so I don't feel totally useless 🙁

Don't know how accurate I would be in guessing this, but the type of scripts required would be? (if im wrong, please feel free to let me know)

connect, login, add, added, delete, deleted, view, update, updated, sql file, and then any other page with what im presumming a few lines of code up the top pointing to see if the user is logged in and if they have permission to access such pages?

Without being too pushy though, I do have a personal timeframe that I wish to have this setup by which is by late November prior to the last committee meeting for final approval to then be implemented with the new site design by January 1.

[djjjozsi]

i have good news to you 🙂

i finished for these:

you can add users, if you have permission, you can add users.

Listing users allowed only in permission in 2 or 3 level.

tomorrow i do the user's details change functions,
and then let's draw to me the
view meeting minutes
and
view meeting minutes parameters.

Try this:

http://www.phpcode.hu/teszt/collaborate/

username: admin
password: 123

if anybody wants to test, lets do that 🙂

busnut;10891203 wrote:

G'day

I tried playing with the scripts that were originally sent, and have failed trying to do some of the basics to help where I can so I don't feel totally useless 🙁

Don't know how accurate I would be in guessing this, but the type of scripts required would be? (if im wrong, please feel free to let me know)

connect, login, add, added, delete, deleted, view, update, updated, sql file, and then any other page with what im presumming a few lines of code up the top pointing to see if the user is logged in and if they have permission to access such pages?

Without being too pushy though, I do have a personal timeframe that I wish to have this setup by which is by late November prior to the last committee meeting for final approval to then be implemented with the new site design by January 1.

[busnut]

djjjozsi;10891205 wrote:

i have good news to you 🙂

i finished for these:

you can add users, if you have permission, you can add users.

Listing users allowed only in permission in 2 or 3 level.

tomorrow i do the user's details change functions,
and then let's draw to me the
view meeting minutes
and
view meeting minutes parameters.

Try this:

http://www.phpcode.hu/teszt/collaborate/

username: admin
password: 123

if anybody wants to test, lets do that 🙂

Hey, thats not bad, I like what I see so far 🙂

The couple of things i've came across is this:
'Log In' link remains even once logged in
'Update User' link doesn't do anything
When adding a new user, it displays 'there is data in (field)' if there is the same info for another user. In this case, except for the username which is unique, all other fields don't need to be unique as some family members will have the same details except for their username (which is their membership #)

There the items ive found but I am presumming that is the first stage of it, so top work so far.

Thankyou very much, looking good 🙂

[busnut]

Just having a bit more of a play with the link and have found that the editing/deleting side of any user doesn't really work that well.
When I went to edit a user, i clicked on 'update user' then submit, all the boxes came up blank so I retyped the info and as long as no details were the same, it actually added a new user.
Deleting a user was the same principle, all the boxes came up blank.

My thoughts there would be when a users detail is to be edited, all the boxes would display the current information (using something like $_POST i think it is), and so that way the admin could edit what they wanted to.
And for deleting, maybe once the 'delete' link is pressed, a popup box or a button link on the page asking 'are you sure you want to delete this member'.

Also found that a user with permission 2 was also able to add a user too. But im sure thats just an easy thing to fix.

[djjjozsi]

If you write the insert page directly, it might insert the details,
but in a short time i could do a check in evry page you enter, that you have the permission level.

"editing/deleting side"
Today i had not time to do thar, but at night i'm going to make it.

After a succesfully inserting, the data from the session will be deleted, that means, if you want to insert another user, the red warning form boxes will not shown.

And please sent a proper list, on a registration, which input fields must required to fill.

And if there mustn't been checked if that data is in the database once.

(its easy to set..)

busnut;10891292 wrote:

Just having a bit more of a play with the link and have found that the editing/deleting side of any user doesn't really work that well.
When I went to edit a user, i clicked on 'update user' then submit, all the boxes came up blank so I retyped the info and as long as no details were the same, it actually added a new user.
Deleting a user was the same principle, all the boxes came up blank.

My thoughts there would be when a users detail is to be edited, all the boxes would display the current information (using something like $_POST i think it is), and so that way the admin could edit what they wanted to.
And for deleting, maybe once the 'delete' link is pressed, a popup box or a button link on the page asking 'are you sure you want to delete this member'.

Also found that a user with permission 2 was also able to add a user too. But im sure thats just an easy thing to fix.

[busnut]

Ah ok, some of that has just gone straight over my head, but I think it somewhat makes some sense.
I did notice the red boxes for fields when editing/deleting a user. I think I may have mentioned already, the only field that needs to be unique (no duplicates) would be the username field, all other fields are fine as I think I may have mentioned that there could be several members who live in the same household.

So in all, by the time this stage one of the project is finished, how many pages/scripts would there be (not that it really matters).
What i'm hoping is by the time stage one is finished, I have my fingers crossed that codes I find off the net for various things can hopefully be intergrated with this like the mailing list which is stage two.

[djjjozsi]

Now its working the update and delete, and my profile part.

somewhere you could find the red boxes, its a little bug, but necessery to store the posted values from the users. And i set the username only not to allow the duplications.

I had to test it to say its done, but i think its now ready to use.

And write your ideas about the meeting times.

busnut;10891295 wrote:

Ah ok, some of that has just gone straight over my head, but I think it somewhat makes some sense.
I did notice the red boxes for fields when editing/deleting a user. I think I may have mentioned already, the only field that needs to be unique (no duplicates) would be the username field, all other fields are fine as I think I may have mentioned that there could be several members who live in the same household.

So in all, by the time this stage one of the project is finished, how many pages/scripts would there be (not that it really matters).
What i'm hoping is by the time stage one is finished, I have my fingers crossed that codes I find off the net for various things can hopefully be intergrated with this like the mailing list which is stage two.

[busnut]

Ah, i'm liking that, can't find any faults yet 🙂 Thankyou

If your able to, when 'updating' or 'adding' a user in admin mode, once the submit button is pressed, can it return to the original screen of 'user list' or 'register a new user'? but with the message above still displaying its done or not done?

And I must'nt have read one of your responses above re the meeting minutes sorry. As for the meeting times, what that is its more so to display meeting minutes of the committee of general meetings, and the meeting minutes are just in pdf format, and I have a script here that will read the 'server' and display all pdf files from a particular directory. All that is required with the script I have is just the code up the top of the page indicating if the user is allowed to view or not and same goes with the link on the menu that if they are not of a particular user level, then they don't see the link. Really its just that couple of lines of code I need to put into the script I think...

here is what I was going to use (not unless you have a better or shorter idea)

<?php

Name of this script (to be left out of directory listing)

$THIS_SCRIPT = getenv("SCRIPT_NAME");

Read path argument, if blank set to "."

$dir=$_GET['dir'];
if ($dir=="" || $dir==false) {
$dir="content/";
}

Determine absolute path (include trailing / if not blank)

$absdir = realpath($dir);
if ($absdir != "") {
$absdir .= "/";
}

Directory where script lives (include trailing / if not blank)

$scriptdir = getcwd();
if ($scriptdir != "") {
$scriptdir .= "/";
}

Insure that absolute dir is under the current directory

This prevents users from submitting a dir argument

that reaches outside the directory where this script resides.

$pos = strpos($absdir,$scriptdir);

if ($pos !== 0) {
echo "<b>ERROR</b>: An invalid directory (<b>$dir</b>) was entered.";
exit();
}

Get clean reldir (need for file and directory URLs)

$reldir = substr($absdir,strlen($scriptdir));

Refresh PHP's (OS's ?) file and directory list cache

clearstatcache();

Read directories and files in current directory

$handle = opendir($absdir);
while (false !== ($filename = readdir($handle)))
{

Add directory to list

if (is_dir($absdir."/".$filename)==true && $filename!=".") { $dirs[] = $filename; }

Add file to list (omit this script)

if (is_dir($absdir."/".$filename)==false && $filename!=$THIS_SCRIPT) {
if ($SHOW_DOT || substr($filename,0,1)!=".") {
$files[] = $filename;
}
}
}

Get parent directory unless current directory

is the same as the directory of this script.

$at_topdir = $absdir==$scriptdir;
if (! $at_topdir) {
$absparentdir="";
$subdirs=explode("/",$absdir);
for($x=1;$x<=count($subdirs)-3;$x++) {
$absparentdir.="/".$subdirs[$x];
}
}

Get relative parent directory

$relparentdir = substr($absparentdir,strlen($scriptdir));

Sort file and directory list

if ($files) { sort($files); }
if ($dirs) { sort($dirs); }

Show current directory

if ($reldir=="") {
$showdir = "";
} else {
$showdir = $reldir;
}

Start display table

List parent directory if present

if ($at_topdir) {
echo " \n";
} else {
echo "<a href=\"$THIS_SCRIPT?dir=$relparentdir\">MENU</a><hr>\n";
}

List directories if present

if ($dirs) {
foreach($dirs as $name) {

List child directory

if ($name!="..") {
echo "<a href=\"$THIS_SCRIPT?dir=$reldir$name\">$name</a><hr>\n";
}
}
} else {
print " \n";
}

List files if present

if ($files) {
foreach($files as $name) {

Form relative path to file by removing leading /.

$name = substr($name, 0, -4);
echo "<a href=\"$reldir$name.pdf\" target='main'>$name</a><hr>\n";
}
} else {
print " \n";
}
?>

And lastly for stage one hopefully, is how hard is it to implement a 'forget my password' feature if the user forgets his/her password? Just looking for something simple where the user will type in their username and the password will be sent to their email address that is on the system.

[busnut]

Ah forgot to add something in last post

When the user selects 'my profile update', can the fields to be edited/updated be:
Name, Address, Phone, Mobile, Email, Password
please, as currently the email or password fields can't be changed as they are not displayed.
And for the user list for when admin goto update another user, can the pwd field be put in there to update the pwd only, but not see it or have the existing pwd dotted or something?

hopefully that should be all for stage 1 🙂

[djjjozsi]

the directory listing is easy to implement,

just 2 lines needed to put on the first lines to be safe with user levels.

there is a list in the database of the php files in the system with a minimum user level. its a hidden field in the database, if you know the id, you can find out the url... index.php?site=id , but not shows in the menu.

password:
i will make a page, forget my password, i want a new password, sent via email.

and the first login, the user must change it.

today i correct little mistakes you'd sent, and testing..

a logo is needed on the top, lets send me your ideas about it.

busnut;10891353 wrote:

Ah, i'm liking that, can't find any faults yet 🙂 Thankyou

If your able to, when 'updating' or 'adding' a user in admin mode, once the submit button is pressed, can it return to the original screen of 'user list' or 'register a new user'? but with the message above still displaying its done or not done?

And I must'nt have read one of your responses above re the meeting minutes sorry. As for the meeting times, what that is its more so to display meeting minutes of the committee of general meetings, and the meeting minutes are just in pdf format, and I have a script here that will read the 'server' and display all pdf files from a particular directory. All that is required with the script I have is just the code up the top of the page indicating if the user is allowed to view or not and same goes with the link on the menu that if they are not of a particular user level, then they don't see the link. Really its just that couple of lines of code I need to put into the script I think...

here is what I was going to use (not unless you have a better or shorter idea)

And lastly for stage one hopefully, is how hard is it to implement a 'forget my password' feature if the user forgets his/her password? Just looking for something simple where the user will type in their username and the password will be sent to their email address that is on the system.

[busnut]

G'day

What I was planning to do was to make the site either in frames or using php includes (like header, menu, footer, content). That part I know how to do, and as for a logo, still working out the design side of the site at the moment.
Just trying to piece together all these other things first so then I can put the blocks together so to speak.

As for the first login the user must change, thats not a bad idea, hadn't thought of that one!

But just to give you the whole picture on this website, this is the plan for it:

Menu will be:
Home, About Us, Our Fleet, Events & Tours, Meetings, Photo Gallery, Login, Contact Us
and then if the user logs in then it will display the other associated links also.

• For a registered user, other items that I plan to include is a mailing list (but only admin can send mail to all users or just to users with a user level of 2 & 3).
• A renewal notification on the home page once logged in to state if that there membership is due in X days (only upto 28 days in advance) or if there membership has lapsed, will display 'membership needs to be renewed'.
• And also the 'meeting minutes' and 'commiittee meeting minutes' as previously mentioned.

So as for the design of the website, no probs there, its just this hardcore php/mysql programming that I need assistance with.

My only other suggestion is when the user is logged on, somewhere on the page can I get it to display the users name somewhere until the user logs out please.