<?php
  require_once 'conn.php';
  
  $userid\; =\; \text{'}\text{'};$name = '';
  $email\; =\; \text{'}\text{'};$password = '';
  $accesslvl\; =\; \text{'}\text{'};\; if\; (isset($_GET['userid'])) {
    $sql\; =\; "SELECT\; *\; FROM\; cms\_users\; WHERE\; user\_id="\; .$_GET['userid'];
    $result\; =\; mysql\_query($sql, $conn)\; or\; die(\text{'}Could\; not\; look\; up\; user\; data;\; \text{'}\; .\; mysql\_error());$row = mysql_fetch_array($result);$userid = $\_GET[\text{'}userid\text{'}];$name = $row[\text{'}name\text{'}];$email = $row[\text{'}email\text{'}];$accesslvl = $row[\text{'}access\_lvl\text{'}];\; \}\; require\_once\; \text{'}header.php\text{'};\; echo\; "$<form method=\"post\" action=\"transact-user.php\">\n";
  
  if (userid) {
    echo "<h1>Modify Account</h1>\n";
  } else {
    echo "<h1>Create Account</h1>\n";
  }
  ?>
  
  <p>
    Full name:<br>
    <input type="text" class="txtinput" name="name" maxlength="100"
      value="<?php echo htmlspecialchars($name);\; ?>">$</p>
  <p>
    E-mail Address:<br>
    <input type="text" class="txtinput" name="email" maxlength="255"
      value="<?php echo htmlspecialchars(email); ?>">
  </p>
  <?php
  
  if (isset($\_SESSION[\text{'}access\_lvl\text{'}])\; and$_SESSION['access_lvl'] == 3)
  {
    echo "<fieldset>\n";
    echo "<legend>Access Level</legend>\n";
  
    $sql\; =\; "SELECT\; *\; FROM\; cms\_access\_levels\; ORDER\; BY\; access\_lvl\; DESC";$result = mysql_query($sql,$conn)
      or die('Could not list access levels; ' . mysql_error());
  
    while ($row\; =\; mysql\_fetch\_array($result)) {
      echo ' <input type="radio" class="radio" id="acl_' .
           $row[\text{'}access\_lvl\text{'}]\; .\; \text{'}"\; name="accesslvl"\; value="\text{'}\; .$row['access_lvl'] . '" ';
  
      if ($row[\text{'}access\_lvl\text{'}]\; ==$accesslvl) {
        echo 'checked="checked" ';
      }
      echo '>' . $row[\text{'}access\_name\text{'}]\; .\; "$<br>\n";
    }
  ?>
  </fieldset>
  <p>
    <input type="hidden" name="userid" value="<?php echo userid; ?>">
    <input type="submit" class="submit" name="action"
      value="Modify Account">
  </p>
  <?php } else { ?>
  <p>
    Password:<br>
    <input type="password" id="passwd" name="passwd" maxlength="50">
  </p>
  <p>
    Password (again):<br>
    <input type="password" id="passwd2" name="passwd2" maxlength="50">
  </p>
  <p>
    <input type="submit" class="submit" name="action" 
      value="Create Account">
  </p>
  <?php } ?>
  </form>
  
  <?php require_once 'footer.php'; ?>