<div class='content'>
    <div class='contenttop'>
        <div class='contenttoptext'>
            Edit a user:
        </div>
    </div>
    <div class='contentmid'><br />
        <div class='contenttitle'>
            Edit a user:
        </div>
        <div class='contentlinetitle'>
        </div>
        <div class='contenttext'>
            <?php
            include('include/db.php');
            if(isset($_SESSION['id'])){
                $query1 = mysql_query("SELECT * FROM users WHERE id = '".mysql_real_escape_string($_SESSION['id'])."'");
                $row1 = mysql_fetch_assoc($query1) or die(mysql_error());
                if(isset($row1['admin']) == 1){
                /////////////////////////////////////////////////////////////
                // Toon formulier van alle gebruikers hieronder ( STAP 1 )//
                ///////////////////////////////////////////////////////////
                    $query2 = mysql_query("SELECT * FROM users WHERE id = '".isset($_POST['userid'])."'");
                    $row2 = mysql_fetch_assoc($query2);
                    echo "Please choose a user to edit.";
                    echo "<form method='post' action='?userid=".$row['id']."'>
                            <select name='userid'>";
                                $sql = mysql_query("SELECT id, username FROM users ORDER BY username DESC");
                                while ($dropdown = mysql_fetch_assoc($sql)){
                                    echo '<option value="'.$dropdown['id'].'">'.$dropdown['username']."</option>'";
                                }
                            echo '</select>';
                            echo '<input type="submit" name="getuser" value="Get user!"/>
                        </form>';
                ///////////////////////////////////////////////////////////////////////////
                // Toon formulier met alle dingen die moeten worden gewijzigd ( STAP 2 )//
                /////////////////////////////////////////////////////////////////////////
                    if(isset($_POST['getuser'])){
                        $query = mysql_query("SELECT * FROM users WHERE id = '".$_POST['userid']."'");
                        $row = mysql_fetch_assoc($query);
                        echo "<form action='' method='post'>
                                <table>
                                    <tr><td width='150' colspan='2'>User settings:</td></tr>
                                    <tr><td>Username:</td><td><input type='text' name='username' value='". $row['username'] ."' READONLY /></td></tr>
                                    <tr><td>Password:</td><td><input type='password' name='password' value=''/></td></tr>
                                    <tr><td>Verify Password:</td><td><input type='password' name='password2' value=''/></td></tr>
                                    <tr><td>E-Mail:</td><td><input type='text' name='email' value='". $row['email'] ."'/></td></tr>
                                    <tr><td colspan='2'>About yourself:</td></tr>
                                    <tr><td>Name:</td><td><input type='text' name='name' value='". $row['name'] ."'/></td></tr>
                                    <tr><td>Age:</td><td><input type='text' name='age' value='". $row['age'] ."'/></td></tr>
                                    <tr><td>Country:</td><td><input type='text' name='country' value='". $row['country'] ."'/></td></tr>
                                    <tr><td>Admin:</td><td>Yes<input type='radio' name='admin' value='1'/></td></tr>
                                    <tr><td></td><td>No<input type='radio' name='admin' value='0' CHECKED /></td></tr>
                                    <tr><td colspan='2'>Gaming:</td></tr>
                                    <tr><td>Clan-Tag:</td><td><input type='text' name='tag' value='". $row['tag'] ."'/></td></tr>
                                    <tr><td><input type='submit' name='edituser' value='Edit user'/></td></tr>
                                </table>
                            </form>";
                    }
                /////////////////////////////////
                // Updaten in mysql ( STAP 3 )//
                ///////////////////////////////
                    if(isset($_POST['edituser'])){
                        mysql_query ("UPDATE users SET
                                        email = '". mysql_real_escape_string($_POST['email']) ."',
                                        name = '". mysql_real_escape_string($_POST['name']) ."',
                                        age = '". mysql_real_escape_string($_POST['age']) ."',
                                        country = '". mysql_real_escape_string($_POST['country']) ."',
                                        admin = '". mysql_real_escape_string($_POST['admin']) ."',
                                        tag = '". mysql_real_escape_string($_POST['tag']) ."'
                                        WHERE id = '".mysql_real_escape_string(isset($_GET['id']))."'") or die(mysql_error());
                                        $error = "Your profile got updated.";
                    }
                }

                //als niet admin//
                else {
                    echo "You are not an admin, leave!";
                }
            }
            //als niet ingelogd//
            else{
                echo "You are not logged in.";
            }
            if(isset($error)){
                echo $error;
            }
            ?>
        </div>
        <div class='contentlinebottom'>
        </div><br />
    </div>
</div>