introduced history; will track user accesstests

3 files changed, 21 insertions, 13 deletions

diff --git a/html/app/config/app_constants.php b/html/app/config/app_constants.php
index 3dac5ec..c3b142f 100644
--- a/html/app/config/app_constants.php
+++ b/html/app/config/app_constants.php
@@ -19,7 +19,7 @@ define('DEFAULT_PRIVILEGES', [
 // (user-)access types
 
 define('TRACK_LOGIN', 1);       // login / logout
-define('TRACK_ACCOUNT', 2);     // create user / activate account
+define('TRACK_ACCOUNT', 2);     // create user / activate account / modidy profile
 define('TRACK_PAYMENTS', 3);    // order / payment / refund etc...
 
 // access type strings
diff --git a/html/app/models/admin/History_model.php b/html/app/models/admin/History_model.php
index 63086e3..638ac62 100644
--- a/html/app/models/admin/History_model.php
+++ b/html/app/models/admin/History_model.php
@@ -3,7 +3,7 @@
 namespace app\models\admin;
 
 use \Registry;
-use app\models\admin\history;
+
 
 class User_model
 {
@@ -21,6 +21,13 @@ class User_model
             'ip' => Registry::get('REQUEST')->IP
         ];
 
+        Registry::use('database')->query(
+            "INSERT INTO history
+                (user_id, `type`, `message`, note, ip)
+            VALUES (:user_id, :type, :message, note, :ip)",
+            [ $access ]
+        )->lastInsertID();
+        
     }
 
 
diff --git a/html/app/models/admin/User_model.php b/html/app/models/admin/User_model.php
index 63d826f..80ce113 100644
--- a/html/app/models/admin/User_model.php
+++ b/html/app/models/admin/User_model.php
@@ -3,7 +3,7 @@
 namespace app\models\admin;
 
 use \Registry;
-use app\models\admin\history;
+use app\models\admin\History_model as History;
 
 class User_model
 {
@@ -128,26 +128,27 @@ class User_model
             'active' => 0       // needs email confirmation
         ];
 
-        $sql = "INSERT INTO user (`prefix`, `name`, `surname`, email, `password`, user_id)
-            VALUES (:prrfic, :name, :surname, :email, :password, :userid)";
-		$stmt = $this->pdo->prepare($sql);
-		$stmt->execute($user);
-
-        $inserted_id = $this->pdo->lastInsertId();
+        // insert new user record
+        $new_user_id = Registry::use('database')->query(
+            "INSERT INTO user
+                (`prefix`, `name`, `surname`, email, `password`, user_id)
+            VALUES
+                (:prefic, :name, :surname, :email, :password, :userid)"
+            [ $user ]
+        )->lastInsertID();
 
         // set default privileges
         self::set_user_privileges($privileges);
 
         // update history
+        History::trackUserAccess($new_user_id, TRACK_ACCOUNT, 'Create User Account');
 
-
-      
-		return [ "success" => true, 'id' => $inserted_id ];
+        // return success and user id
+		return [ "success" => true, 'id' => $new_user_id ];
     }
 
 
 
-
     /** inherited privileges
      * 
      * list of all inhereted (sub-)privileges