Mini Shell

<?php 
include('topo.inc.php'); 

if($_GET['idusuario'] == TRUE) 
	$idusuario = anti_injection($_GET['idusuario']); 
else 
	$idusuario = anti_injection($_POST['idusuario']);

$nome 	= $_POST['nome'];
$login 	= $_POST['login'];
$senha 	= $_POST['senha'];
$status = $_POST['status'];

if($_POST['cmd'] == "add")
{
	$senha_aux = @md5($senha);
	
	$str = "INSERT INTO usuarios (nome, login, senha, status) VALUES ('$nome', '$login', '$senha_aux', '$status')";
	$rs  = mysql_query($str) or die(mysql_error());
	
	redireciona("usuarios.php?ind_msg=1");
}

if($_POST['cmd'] == "edit")
{
	$senha_aux = @md5($senha);
	
	$str = "UPDATE usuarios SET nome = '$nome', login = '$login', status = '$status' WHERE codigo = '$idusuario'";
	$rs  = mysql_query($str) or die(mysql_error());
	
	if($senha)
	{
		$str = "UPDATE usuarios SET senha = '$senha_aux' WHERE codigo = '$idusuario'";
		$rs  = mysql_query($str) or die(mysql_error());
	}
	
	redireciona("usuarios.php?ind_msg=2");
}

if($_GET['ind_msg'] == 1)
	$msg = '<div class="alert success">Usuário inserido com sucesso!</div>';
elseif($_GET['ind_msg'] == 2)
	$msg = '<div class="alert success">Usuário editado com sucesso!</div>';

$str = "SELECT * FROM usuarios WHERE codigo = '$idusuario'";
$rs  = mysql_query($str) or die(mysql_error());
$vet = mysql_fetch_array($rs);

include('menu.inc.php'); 
?>
<script language="javascript">
function valida(ind)
{	
	if(ind == 1)
		document.form.cmd.value = "add";
	else
		document.form.cmd.value = "edit";
		
	//document.form.submit();
}
</script>
<section id="content">

<div class="g12">
    <h1>Usuários</h1>
    
    <!-- area do form -->
    <form name="form" id="form" method="post" autocomplete="off">
    <input type="hidden" name="cmd">
        <?=$msg?>
    
        <fieldset>
            <section><label for="text_field">Nome:</label>
                <div><input type="text" id="nome" name="nome" value="<?=$vet['nome']?>" required></div>
            </section>
            <section><label for="login">Login:</label>
                <div><input id="login" name="login" type="login" value="<?=$vet['login']?>" required></div>
            </section>
            <section><label for="text_field">Senha:</label>
                <div><input type="password" id="senha" name="senha" password ></div>
            </section>
            <section><label for="textarea_auto">Status:</span></label>
                <div>
                    <input type="radio" id="status" name="status" <?=($vet['status'] == FALSE || $vet['status'] == 1) ? "checked" : "" ?> value="1"><label for="status" class="radio">Ativo</label>
                    <input type="radio" id="status" name="status" <?=($vet['status'] == 2) ? "checked" : "" ?> value="2"><label for="status" class="radio">Inativo</label>
                </div>
            </section>
            <section>
                <?php
                if($ind == 1)
                {
                ?>
                <div><button class="i_tick icon" onClick="javascript: valida(<?=$ind?>);">Cadastrar</button></div>
                <?php
                }
                else
                {
                ?>
                <div><button class="i_refresh_3 icon" onClick="javascript: valida(<?=$ind?>);">Alterar</button></div>
                <?php
                }
                ?>
            </section>
        </fieldset>
    </form>
    <!-- end form -->
    
    <?php
	$str = "SELECT * FROM usuarios ORDER BY nome";
	$rs  = mysql_query($str) or die(mysql_error());
	$num = mysql_num_rows($rs);
	?>
    
    <h1>Lista de usuários</h1>
    <p>Todos os usuários cadastrados no sistema</p>
    
	<?php
	if($num > 0)
	{
	?>
    <table >
        <thead>
            <tr>
                <th colspan="3">LEGENDA - Status do usuário</th>
            </tr>
        </thead>
        <tbody>
            <tr >
            	<td style="background-color:#f0a8a8">Inativo</td>
                <td style="background-color:#BFDFFF">Ativo</td>
            </tr>
        </tbody>
    </table>
    
    <fieldset>
    <table class="datatable">
        <thead>
            <tr>
                <th>Nome</th>
                <th>Login</th>
                <th>Editar</th>
            </tr>
        </thead>
        <tbody>
        <?php
		while($vet = mysql_fetch_array($rs))
		{
			if($vet['status'] != 1)
				$class = 'class="gradeA"';
			else
				$class = 'class="gradeU"';
		?>
            <tr <?=$class?>>
            	<td><?=$vet['nome']?></td>
                <td><?=$vet['login']?></td>
                <td class="c"><a class="btn i_pencil icon small" title="editar" href="usuarios.php?ind=2&idusuario=<?=$vet['codigo']?>" >editar</a></td> 
            </tr>
        <?php
		}
		?>
        </tbody>
    </table>
    </fieldset>
    
    <!-- end form -->
    <?php
	}
	else
	{
	?>
    <p>Nenhum usuário cadastrado no sistema</p>
    <?php
	}
	?>
</div>
</section>
<!-- end div #content -->
        
        
<?php include('rodape.inc.php'); ?>