من برای تعیین سطح دسترسی این کار رو کردم اگر دوستان نظر خودشون رو در این مورد بگن که حوشحال میشم
<?
$access='';
$ok_cookie = false;
include('signin.php');
if (!$ok_cookie) {exit;}
if (isset($_REQUEST['bankname'])) $bankname=$_REQUEST['bankname'];
if (isset($_REQUEST['code'])) $code=$_REQUEST['code'];
if (isset($HTTP_COOKIE_VARS['c_user']))$user_name=$HTTP_COOKIE_VARS['c_user'];
$password='';
require_once("../include/connect.php");
if ($code!=''){
$query=mysql_query("select * from $bankname where code='$code'");
$row=mysql_fetch_assoc($query);
$username=$row['username'];
$password=$row['password'];
$access=$row['access'];
}
if (isset($_REQUEST['_submit'])){
$access='';
$idaccount = $_REQUEST['idaccount'];
$username=$_REQUEST['username'];
$password=$_REQUEST['password'];
$password=md5($password);
if ($username!=$user_name){
echo '<script>alert("شما اجازه اصلاح اين کاربر را نداريد");</script>';
exit;
}
if (count($idaccount)>0) {
foreach ($idaccount as $index => $value){
$access.=$value;
}
}
if ($access=='') $access=$_REQUEST['access'];
if ($code==''){
$insert="insert into $bankname (username,password,access) values('$username','$password','$access')";
mysql_query($insert);
}else{
$update="update $bankname set username='$username',password='$password',access=' $access' where code='$code'";
mysql_query($update);
setcookie ("c_pass",$password,time()+36000);
}
header("Location: list_user.php?bankname=$bankname");
}
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">
<link href="form.css" type="text/css" rel="stylesheet">
</head>
<script language=jscript src="../java/farsi.js"> </script>
<script>
function check() {
var form = document.adduser;
if (form.username.value == "" ) {
alert("لطفا نام و نام خانوادگي و نام کاربري و خود را وارد نماييد");
return false;
}
if (form.password.value=='') {
alert('لطفا رمز عبور خود را تعيين نماييد ');
return false;
}
if (form.password.value.length<4) {
alert('حداقل طول کلمه رمز 4 حرف مي باشد ');
return false;
}
if (form.password.value != form.repassword.value) {
alert('رمزهاي عبور وارده شده باهم يکي نيست ');
return false;
}
}
function checkAll(oElement) {
oForm = oElement.form;
oElement = oForm.elements[oElement.name];
if(oElement.length)
{
bChecked = oElement[0].checked;
for(i = 1; i < oElement.length; i++)
oElement[i].checked = bChecked;
}
}
form.submit();
</script>
<body>
<br />
<div align="center"><font color="red" face="Tahoma" size="3">افزدودن کاربر</font></div>
<br />
<br />
<form name="adduser" method="POST" onsubmit="return check();">
<input type="Hidden" name="bankname" value="<?php echo $bankname; ?>">
<input type="Hidden" name='_submit' value='yes'>
<input <?php if (ereg('G',$access)){echo 'disabled';}?> type="Hidden" name='username' value="<?php if (!ereg('G',$access)){echo $username;}?>">
<input <?php if (ereg('G',$access)){echo 'disabled';}?> type="Hidden" name='access' value="<?php if (!ereg('G',$access)){echo $access;}?>">
<input type="Hidden" name='code' value='<?echo $code;?>'>
<table width="100%" cellpadding="6" cellspacing="0">
<tr>
<td align="right"><input <?php if (!ereg('G',$access)){echo 'disabled';}?> name="username" tabindex="1" maxlength="20" size="50" onkeypress="farsi()" value="<?echo $username;?>" /></td>
<td align="right" width="20%"><font color="blue" face="Tahoma" size="2">:نام کاربري</font></td>
</tr>
<tr>
<td align="right"><input name="password" type="password" tabindex="2" maxlength="20" size="50" value="<?echo $password?>" /></td>
<td align="right" width="20%"><font color="blue" face="Tahoma" size="2">: کلمه عبور</font></td>
</tr>
<tr>
<td align="right"><input name="repassword" type="password" tabindex="2" maxlength="20" size="50" /></td>
<td align="right" width="20%"><font color="blue" face="Tahoma" size="2">: تکرار کلمه عبور</font></td>
</tr>
</table>
<table border="0" width="100%" cellpadding="2" cellspacing="0" height="10%">
<tr bgcolor="#E4E9E8" >
<td align="center" colspan="5" ><font color="blue" face="Tahoma" size="2">مجوز دسترسي</font></td>
<td align="right" width="20%"><font face="Tahoma" size="2">انتخاب همه</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> type="checkbox" id="checkall" name="checkall" onclick="checkAll(this);" <?php if (ereg('FEDCBAMKJIHG',$access)){echo " checked";}?> /></td>
</tr>
<tr>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="F" type="checkbox" <?php if (ereg('F',$access)){echo " checked";}?> /></td>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="E" type="checkbox" /<?php if (ereg('E',$access)){echo " checked";}?>></td>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="D" type="checkbox" /<?php if (ereg('D',$access)){echo " checked";}?>></td>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="C" type="checkbox" <?php if (ereg('C',$access)){echo " checked";}?>/></td>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="B" type="checkbox" <?php if (ereg('B',$access)){echo " checked";}?> /></td>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="A" type="checkbox" <?php if (ereg('A',$access)){echo " checked";}?> /></td>
</tr>
<tr>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="M" type="checkbox" <?php if (ereg('M',$access)){echo " checked";}?>/></td>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="K" type="checkbox" <?php if (ereg('K',$access)){echo " checked";}?>/></td>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="J" type="checkbox" <?php if (ereg('J',$access)){echo " checked";}?>/></td>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="I" type="checkbox" <?php if (ereg('I',$access)){echo " checked";}?>/></td>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="H" type="checkbox" <?php if (ereg('H',$access)){echo " checked";}?>/></td>
<td align="right"><font color="red" face="Tahoma" size="2">قسمت</font><input <?php if (!ereg('G',$access)){echo 'disabled';}?> id="checkall" name="idaccount[]" value="G" type="checkbox" <?php if (ereg('G',$access)){echo " checked";}?>/></td>
</tr>
</table>
<br /><br />
<div align="center">
<input type="button" name="cancel" value="بازگشت" style="font-family:tahoma;font-size:11;" onclick="javascript:window.location.href='<?php echo "list_user.php?bankname=$bankname";?>'" />
<input type="submit" name="ok" value="تاييد" style="font-family:tahoma;font-size:11;" />
</div>
</form>
</body>
</html>