setMysqlHandler($sql);
/* Delete */
if ($act == "del") {
checkUserLevel('is_admin', $lea_user_level);
$tmp = $address->del($id);
if (is_array($tmp)) { //error
$error = true;
$output = printErrors($tmp);
} else {
$act = "list";
}
}
/* Show */
if ($act == 'show') {
$address->get($id);
extract($address->data);
}
/* New */
if ($act == 'new') {
/* Security:
Member ID should be a positive integer
Member ID should be my Member ID
OR I must be an admin
*/
$member = new Members;
$member->setMysqlHandler($sql);
$MEMBER_idMEMBER = $mid;
if ($member->get($mid)) {
if ($mid < 0 || ($member->data['USERACCOUNT_idUSERACCOUNT'] !== $_SESSION['gml_user_id'] || $lea_user_level['is_admin'] !== true)) {
die('Hack attempt: invalid member ID');
}
}
}
/* Edit */
if ($act == 'edit') {
$address->get($id);
extract($address->data);
}
if ($act == 'list') {
$address->getData("WHERE `MEMBER_idMEMBER` = '".$thisMemberId."'");
}
// OUTPUT
include_once $leaElements.'header.php'; // XHTML/CSS header
?>
Welcome to LeaCOR!
LeaCOR is a project by the University of Duisburg-Essen.
Add new';
for ($i=0;$idata);$i++) {
extract($address->data[$i]);
include $leaTemplates.'address.tpl.php';
echo "\n
\n";
}
break;
}
if ($error) {
include_once $leaForms.'addressform.php';
}
?>
?>