<?php
///////////////////////////////////////////////////////////////////////////////////////////
///Script PHP/MYSQL of management of classifieds ads developed by Script PAG
///Script PAG all rights reserved. Use under license. http://www.script-pag.com
///////////////////////////////////////////////////////////////////////////////////////////

############################################################

require_once __DIR__.'/includes_adm/all_fns_adm.php';

///////////////////////////////////
//Check if the super administrator is logged
//////////////////////////////////

if(!empty($_SESSION['valid_admin'])) 
$valid_admin = $_SESSION['valid_admin'];

if(!check_super_admin()) 
redirect('index.php');

///////////////////////////////////
//Validation of the level of administration
//////////////////////////////////

if(!empty($_GET['level']))
{
	if($_GET['level'] == 1)
	$level = (int) $_GET['level'];
	
	else redirect('index.php');

	$admin_acc = get_admin_acc($level);
}
else redirect('index.php');

///////////////////////////////////
//Validation of the action
//////////////////////////////////

if(!empty($_GET['act']))
{
	if($_GET['act'] >= 1 && $_GET['act'] <= 4)
	$act = (int) $_GET['act'];
	
	else $act = 0;
}
else $act = 0;

///////////////////////////////////
//Initializing variable $error
//////////////////////////////////

$error = '';

///////////////////////////////////
//Admin account validation
//////////////////////////////////
	
$id_adm = (!empty($_GET['id_adm'])) ? (int) $_GET['id_adm'] : 0;
	
///////////////////////////////////
//Get account infos
//////////////////////////////////

if(!empty($id_adm))
{
	$infos = get_admin_acc_info($id_adm);
	
	$login = $infos[0];
	$email = $infos[1]; 
}

///////////////////////////////////
//Check the data
//////////////////////////////////

if($act == 1)
{
	if(isset($_POST['login']))
	{
		if(empty($_POST['login']))
		$error = 1;
		
		elseif(strlen($_POST['login']) < 3 || strlen($_POST['login']) > 20)
		$error = 2;
	
		elseif(!verify_admin_acc_login($_POST['login']))
		$error = 3;
		
		elseif (empty($_POST['pass1']))
		$error = 4;
		
		elseif(strlen($_POST['pass1']) < 5 || strlen($_POST['pass1']) > 20)
		$error = 5;
	
		elseif($_POST['pass1'] != $_POST['pass2'])
		$error = 6;
		
		elseif (empty($_POST['email1']))
		$error = 7;
		
		elseif(!valid_email($_POST['email1']))
		$error = 8;
		
		elseif(!verify_admin_acc_email($_POST['email1']))
		$error = 9;
	
		elseif($_POST['email1'] != $_POST['email2'])
		$error = 10;
	}
}

if($act == 2)
{
	if(isset($_POST['login']))
	{
		if(!verifiy_password($id_adm, $_POST['pass1']))
		$error = 1;
		
		elseif(empty($_POST['login']))
		$error = 2;
	
		elseif(!verify_login($id_adm, $_POST['login']) )
		$error = 3;
	
		elseif(strlen($_POST['login']) < 3 || strlen($_POST['login']) > 20)
		$error = 4;
		
		elseif(empty($_POST['pass2']))
		$error = 5;
		
		elseif(strlen($_POST['pass2']) < 5 || strlen($_POST['pass2']) > 20)
		$error = 6;
	
		elseif($_POST['pass2'] != $_POST['pass3'])
		$error = 7;
		
		elseif(empty($_POST['email1']))
		$error = 8;
		
		elseif(!valid_email($_POST['email1']))
		$error = 9;
		
		elseif(!verify_email_acc($id_adm, $_POST['email1']))
		$error = 10;
		
		elseif($_POST['email1'] != $_POST['email2'])
		$error = 11;
	}
}

///////////////////////////////////
//Create the new administrator account
//////////////////////////////////

if(!empty($_POST['login']) && empty($error) && $act == 1)
{
	create_admin_acc($_POST, $level);
	
	redirect('acc_admin.php?level='. $level .'&succes=1&menu=1');
}

///////////////////////////////////
//Update administrator account
//////////////////////////////////

if(!empty($_POST['login']) && empty($error) && $act == 2)
{
	update_admin_acc($_POST);
	
	redirect('acc_admin.php?level='. $level .'&succes=2&menu=1');
}

///////////////////////////////////
//Delete administrator account
//////////////////////////////////

if(!empty($_GET['id_adm']) && $act == 3)
{
	if($id_adm != 1)
	{
		delete_admin_acc($id_adm);
		
		redirect('acc_admin.php?level='. $level .'&succes=3&menu=1');
	}
	else redirect("index.php");
}

///////////////////////////////////
//Delete all administrators accounts
//////////////////////////////////

if(!empty($_POST['check_all']) && $act == 4)
{
	$array = $_POST['check_all'];
	
	foreach($array as $id_adm)
	{
		delete_admin_acc($id_adm);
	}
	
	$succes = (count($_POST['check_all']) > 1) ? 4 : 3;
		
	redirect('acc_admin.php?level='. $level .'&succes='. $succes .'&menu=1');
}

///////////////////////////////////
//Close database connexion
//////////////////////////////////

$conn = null;

///////////////////////////////////
//Display view
//////////////////////////////////

$view = array();

if($act == 2)
$view[] = 'template_adm/tpl_admin_acc_mod_adm.php';

else $view[] = 'template_adm/tpl_admin_acc_adm.php';

require_once __DIR__.'/template_adm/tpl_layout_adm.php';