mang

<?php
class userManager
{
function addUser($arr,$files){

   require_once(COMM_PATH."DatabaseManager.php");
$db= new DatabaseManager();

if(self::userExist($arr)){
echo '<script>document.location.href="manageUser.php?msg=4";</script>';
return $result=0;
}

require_once(COMM_PATH."Helper.php");
$helper = new Helper();

if(isset($_REQUEST['uId']) && $_REQUEST['uId']!=''){
$query='UPDATE users SET name="'.$arr['name'].'",address="'.$arr['address'].'",userType="'.$arr['userType'].'",phoneNo="'.$arr['phoneNo'].'",cellPhone="'.$arr['cellPhone'].'",businessPhone="'.$arr['businessPhone'].'",barNo="'.$arr['barNo'].'",email="'.$arr['email'].'",alternateEmail1="'.$arr['alternateEmail1'].'",alternateEmail2="'.$arr['alternateEmail2'].'",alternateEmail3="'.$arr['alternateEmail3'].'",billingInformation="'.$arr['billingInformation'].'",billingPlan="'.$arr['billingPlan'].'",isActive="'.$arr['isActive'].'",dateUpdated=now() WHERE  userId="'.$_REQUEST['uId'].'"';
$result=$db->executeUpdate($query);
} else {
$query='INSERT INTO users(name,userName,address,userType,phoneNo,cellPhone,businessPhone,barNo,email,alternateEmail1,alternateEmail2,alternateEmail3,billingInformation,billingPlan,isActive,dateCreated,dateUpdated) VALUES("'.$arr['name'].'","'.$arr['userName'].'","'.$arr['address'].'","'.$arr['userType'].'","'.$arr['phoneNo'].'","'.$arr['cellPhone'].'","'.$arr['businessPhone'].'","'.$arr['barNo'].'","'.$arr['email'].'","'.$arr['alternateEmail1'].'","'.$arr['alternateEmail2'].'","'.$arr['alternateEmail3'].'","'.$arr['billingInformation'].'","'.$arr['billingPlan'].'","'.$arr['isActive'].'",now(),now())';
$result=$db->executeUpdate($query);
$rowId = $db->lastInsertId();

if(count($result) >0){
$rand_number=$this->random_string();
$subject = "Your Cortq temporary password";
$from = ADMIN_MAIL;
$to = $arr['email'];
$mailContent = "Hello ".ucfirst($arr['name']).",<br /><br />";
$mailContent .= "Welcome to CortQ!<br />";
$mailContent .= "Just login using folllowing detail:<br /><br />";
$mailContent .= "User name:  ".$arr['userName']."<br />";
$mailContent .= "User e-mail:  ".$arr['email']."<br />";
$mailContent .= "Session ID:  ".$rand_number."<br /><br />";
$mailContent .= "Thanks,<br />";
$mailContent .= "The CortQ Team ";
$headers ="From:".ADMIN_MAIL."\nReply-To:".ADMIN_MAIL."\nContent-Type:text/html";
//echo $mailContent; die();
@mail($to,$subject,$mailContent,$headers);
$sql="UPDATE users SET password ='".md5($rand_number)."' WHERE userId=".$rowId;
$result = $db->executeUpdate($sql);
}
}
}

    function random_string(){
$character_set_array = array( );
$character_set_array[ ] = array( 'count' => 7, 'characters' => 'abcdefghijklmnopqrstuvwxyz' );
$character_set_array[ ] = array( 'count' => 1, 'characters' => '0123456789' );
$temp_array = array( );
foreach ( $character_set_array as $character_set )
 {
for ($i=0;$i<$character_set[ 'count' ];$i++)
  {
$temp_array[ ]=$character_set[ 'characters' ][ rand( 0, strlen( $character_set[ 'characters' ] ) - 1 ) ];
  }
 }
 shuffle( $temp_array );
 return implode( '', $temp_array );
}



   function getUserList($arr,$limitUp, $limitDown)
{
if(isset($_REQUEST['sortBy']) && $_REQUEST['sortBy']!=''){
$sortBy = $_REQUEST['sortBy'];
} else {
$sortBy = "userId";
}

if(isset($arr['ordBy']) && $arr['ordBy']!=''){
$ordBy = $arr['ordBy'];
} else {
$ordBy = "DESC";
}
require_once(COMM_PATH."DatabaseManager.php");
$db= new DatabaseManager();
$query='SELECT * FROM users ORDER BY '.$sortBy.' '.$ordBy.' LIMIT '.$limitUp.', '.$limitDown;  
$result=$db->executeQuery($query);
return $result;
}

  function getCountOfPages(){
require_once(COMM_PATH."DatabaseManager.php");
$db= new DatabaseManager();
$query='SELECT COUNT(*) as cnt FROM users';
$result=$db->executeQuery($query);
return $result[0]['cnt'];
}

  function getUserForEdit($uId){
require_once(COMM_PATH."DatabaseManager.php");
$db= new DatabaseManager();
$query='SELECT * FROM users WHERE userId="'.$uId.'"';
$result=$db->executeQuery($query);
return $result;
}

  function userExist($arr){
require_once(COMM_PATH."DatabaseManager.php");
$db = new DatabaseManager();
if(isset($arr['uId']) && $arr['uId']!='')
$sql = "SELECT * FROM users where userName = '".$arr['userName']."' and userId!= '".$arr['uId']."'";
else
$sql = "SELECT * FROM users where userName = '".$arr['userName']."'";
$resList = $db->executeQuery($sql);
if(count($resList)>0){
return true;
} else {
return false;
}
}

  function deleteUser($uId){
require_once(COMM_PATH."DatabaseManager.php");
$db= new DatabaseManager();
//self::deleteUploadedImages($uId);
$query='DELETE FROM users WHERE userId="'.$uId.'"';
$result=$db->executeUpdate($query);
return $result;
}
}
?>