HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux ip-172-31-18-78 6.17.0-1017-aws #17~24.04.1-Ubuntu SMP Tue May 26 21:09:53 UTC 2026 aarch64
User: ubuntu (1000)
PHP: 8.2.31
Disabled: NONE
Upload Files
File: /var/www/content-sp/work-sp/nqb_user_add.php
<?php

// ini_set('display_errors',1);
// ini_set('display_startup_errors',1);
// error_reporting(E_ALL);

include_once('nqb_user_section.php');

$curDateTime = date('Y-m-d H:i:s'); // add 5 hrs 30 min in 

//check edit permissions
$fileName = str_replace('.php', '', basename($_SERVER['REQUEST_URI'], '?' . $_SERVER['QUERY_STRING']));
if (in_array($fileName, $pageArray)) {

$SP_EDITORS = 'csp_editors';
$SP_MASTER_CATEGORY = 'csp_sp_master_category';
$allMaster = $conn->query("select mc.master_id, mc.master_name from $SP_MASTER_CATEGORY as mc order by mc.master_id asc");
//create user
if(isset($_REQUEST['create_user'])){

    $dis_name = $_REQUEST['dis_name'];
    $dis_email = $_REQUEST['dis_email'];
    $dis_mobile = $_REQUEST['dis_mobile'];
    $ed_username = $_REQUEST['ed_username'];
    $userPwd = $_REQUEST['userPwd'];
    $ed_userRole = $_REQUEST['ed_userRole'];
    $ed_fileaccess = $_REQUEST['ed_fileaccess'];
    $ed_prfaccess = $_REQUEST['ed_prfaccess'];
    $ed_masters = $_REQUEST['ed_masters'];
    $user_status = $_REQUEST['user_status'];
    $ed_view_access = $_REQUEST['ed_view_access'];
    if(!empty($ed_masters)) {
        $assignMaster = implode(',',$ed_masters);
    } else {
        $assignMaster = '';
    }


    if($ed_username !='' && $userPwd != '' && (strlen($userPwd)>6)) {
        $passwordCrypt = md5($userPwd);
        $createQUERY = "INSERT into $SP_EDITORS set editor_login='$ed_username', editor_password='$passwordCrypt',editor_status='$user_status',display_name='$dis_name',editor_role='$ed_userRole',contact_name='$dis_name',official_email='$dis_email',contact_no='$dis_mobile',team_id='3',q_masters='$assignMaster',download_access='$ed_fileaccess',view_page_access='$ed_view_access',primary_edit_access='$ed_prfaccess',added_date='$curDateTime'";
        if($conn->query($createQUERY)) {
            $msg = '<div class="alert alert-success alert-dismissible" role="alert">User created successfully<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span></button></div>';
        } else {
            $msg = '<div class="alert alert-danger alert-dismissible" role="alert">'.$conn->error.'<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span></button></div>';
        }
    } else {
        $msg = '<div class="alert alert-danger alert-dismissible" role="alert">All Fields required and Password length should be greater than 6.<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span></button></div>';
    }
}

?>
<div class="row">
    <div class="col-md-12">
        <div class="panel panel-primary">
            <div class="panel-heading clearfix">
                <h4 class="panel-title">Add User
                </h4>

            </div>
            <div class="spacer"></div>
            <div class="panel-body">
            <span id="alert1" style="display: block;"><?php if(isset($msg)){ echo $msg; } ?></span>
                <form id="frmaddQues" method="post" action="" onsubmit="return validateForm();">
					
					<div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Name:</label>
                        <div class="col-sm-5">
                            <input type="text" name="dis_name" id="dis_name" class="form-control" placeholder="Enter display name" value="<?php echo @$dis_name ?>" required>
                        </div>
                    </div>
					
					<div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Email Id:</label>
                        <div class="col-sm-5">
                            <input type="text" name="dis_email" id="dis_email" class="form-control" placeholder="Enter email id" value="<?php echo @$dis_email ?>" required>
                        </div>
                    </div>
					
					<div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Mobile Number:</label>
                        <div class="col-sm-5">
                            <input type="text" name="dis_mobile" id="dis_mobile" class="form-control" placeholder="Enter mobile number" value="<?php echo @$dis_mobile ?>" required>
                        </div>
                    </div>
					
                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Username:</label>
                        <div class="col-sm-5">
                            <input type="text" name="ed_username" id="ed_username" class="form-control" placeholder="Enter username.." value="<?php echo @$ed_username ?>" required>
                        </div>
                    </div>
                    
                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Password:</label>
                        <div class="col-sm-5">
                            <input type="password" name="userPwd" id="userPwd" class="form-control" placeholder="Enter password" value="<?php echo @$userPwd ?>" required>
                        </div>
                    </div>
					
					<div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Starting Role:</label>
                        <div class="col-sm-8">
                            <input type="radio" name="ed_userRole" class="form-control" value="2">Add Question
							<input type="radio" name="ed_userRole" class="form-control" value="3">Proof Read Question
							<input type="radio" name="ed_userRole" class="form-control" value="4">Both
                            <input type="radio" name="ed_userRole" class="form-control" value="5">Whitelabel User
                        </div>
                    </div>
					
					<div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Download Access <font style="font-size:10px;">(User can download questions in word file)</font>:</label>
                        <div class="col-sm-5">
                            <input type="radio" name="ed_fileaccess" class="form-control" value="Y">Yes
							<input type="radio" name="ed_fileaccess" class="form-control" value="N">No
                        </div>
                    </div>
                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Primary Proofread Access <font style="font-size:10px;">(For olympiad proofreaders)</font>:</label>
                        <div class="col-sm-5">
                            <input type="radio" name="ed_prfaccess" class="form-control" value="1">Yes
							<input type="radio" name="ed_prfaccess" class="form-control" value="0">No
                        </div>
                    </div>
					<div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Proof Read Instanly <font style="font-size:10px;">(master structure change and proof read instanly button will be shown in question view page, if active)</font>:</label>
                        <div class="col-sm-5">
                            <select name="ed_view_access" id="ed_view_access" class="form-control">
                                <option value="0">Select Access</option>
                                <option value="0">Not Show</option>
                                <option value="1">Show</option>
                            </select>
                        </div>
                    </div>
					
					<div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Assign Specific Master <font style="font-size:10px;">(If user can upload questions in specific master only)</font>:</label>
                        <div class="col-sm-5">
                            <select name="ed_masters[]" class="form-control" id="ed_masters" multiple>
							<?php while ($ms = $allMaster->fetch_assoc()) { ?>
								<option value="<?php echo $ms['master_id']; ?>"><?php echo $ms['master_name']; ?></option>
							<?php } ?>
						</select>
                        </div>
                    </div>
					
                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Status:</label>
                        <div class="col-sm-5">
                            <select name="user_status" class="form-control">
                                <option value="1">Active</option>
                                <option value="0">De-Active</option>
                            </select>
                        </div>
                    </div>
                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">&nbsp;</label>
                        <div class="col-sm-5">
                            <button type="submit" name="create_user" class="btn btn-primary btn-rounded">Create</button>
                        </div>
                    </div>
                </form>
            </div>
        </div>
    </div>
</div>
</div><!-- Main Wrapper -->

<div class="page-footer">
    <p class="no-s">sarkaripariksha.com</p>
</div>
</div><!-- Page Inner -->

<?php
} else {
    echo "<script type='text/javascript'>alert('You dont have access');</script>";
    echo "<script type='text/javascript'>location.href='/work-sp';</script>";
}
include_once('footer.php');
?>