if($_POST) {   
        foreach ($_POST['users_select'] as $value) {
            echo $value;
            //User::remove_user($value);	
        }    
    ?>
    <div class="success">All Selected users has been deleted successfully  .. !!</div>
    <?php 
}

<?php
function print_users() {
	define('ADMIN_USER_GRID_NUM', 5);
	
	$users_order_by = $_GET['order_by'];
	$users_order = $_GET['order'];
	$users_status = $_GET['status'];
	$users_limit = $_GET['limit'];
	$page = $_GET['page'];
	
	
	if(empty($users_order_by)) { $users_order_by = "id"; }
	if(empty($users_order)) { $users_order = "ASC"; }
	if(empty($users_status)) { $users_status = "active"; }
	if(empty($users_limit)) { $users_limit = 0; }

	$condition = "WHERE `user_status` = '".$users_status."'";
	

	
	$users = User::get_users($condition,"ORDER BY `user_".$users_order_by."` ".$users_order." ","LIMIT ".$users_limit.",".ADMIN_USER_GRID_NUM);
	?>
	<script>
	function change_status()
	{
		var status = document.getElementById("users_status").value;
		window.location = "index.php?page=<?php echo $page; ?><?php if($users_order_by){ echo "&order_by=".$users_order_by;} ?><?php if($users_order){echo "&order=".$users_order;} ?>&status=" +status;
	}
	</script>
<form method="post" name="grid_users">
<h3>Users</h3>
<fieldset>
<?php 
if($_POST) {
	print_r($_POST);
	for ($i=0; $i<count($_POST['users_select']); $i++) {
		if($_POST['users_select'][$i] != "") {
			//User::remove_user($_POST['users_select'][$i]);
		}
	}
	?>
	<div class="success">All Selected users has been deleted successfully  .. !!</div>
	<?php 
}
?>

<select name="users_status" id="users_status" onchange="change_status();">
	<option value="">---</option>
	<option value="active">Active</option>
	<option value="not_active">Not Active</option>
	<option value="blocked">Blocked</option>
</select>
<div style="float: right;">
	<input type="submit" name="submit" value="delete" />
</div>
<table width="100%" style="text-align: center; margin-top: 20px;">
	<tr>
	<?php if($users_order == "ASC"){$users_order = "DESC";} ?>
		<th><a href="index.php?page=users&order_by=id&order=<?php echo $users_order; ?>">ID</a></th>
		<th><a href="index.php?page=users&order_by=name&order=<?php echo $users_order; ?>">Full Name</a></th>
		<th><a href="index.php?page=users&order_by=email&order=<?php echo $users_order; ?>">Email</a></th>
		<th><a href="index.php?page=users&order_by=gender&order=<?php echo $users_order; ?>">Gender</a></th>
		<th><a href="index.php?page=users&order_by=status&order=<?php echo $users_order; ?>">Active</a></th>
		<th><a href="index.php?page=users&order_by=register_date&order=<?php echo $users_order; ?>">Registered</a></th>
		<th width="100">Action</th>
		<th>select</th>
	</tr>
<?php 
if(count($users)>0){
$counter = 0;
foreach ($users as $user){  $counter += 1;?>
	<tr <?php if( ($counter % 2) != 0 ){echo 'class="odd"';} ?>>
		<td><?php echo $user['user_id']; ?></td>
		<td><a href="index.php?page=users&sub_page=control_users&action=view&user_id=<?php echo $user['user_id']; ?>"><?php echo htmlspecialchars($user['user_name']); ?></a></td>
		<td><?php echo $user['user_email']; ?></td>
		<td><?php if($user['user_gender'] == 1){echo "Male";}else{echo "Female";} ?></td>
		<td><?php echo $user['user_status']; ?></td>
		<td><?php echo $user['user_register_date']; ?></td>
		<td>
		<a href="index.php?page=users&sub_page=control_users&action=edit&user_id=<?php echo $user['user_id']; ?>">
		<img src="style/icons/user_edit.png" title="Edit user"/></a><a href="index.php?page=users&sub_page=control_users&action=delete&user_id=<?php echo $user['user_id']; ?>">
		<img src="style/icons/user_delete.png" title="Delete user"/></a></td>
		<td>
		<input type="checkbox" name="users_select[]" value="<?php echo $user['user_id']; ?>" /></td>
	</tr>
<?php }} ?>
</table>
<div class="pager">
<?php 
	if($users_limit){$limit = $users_limit;}else {$limit = 0;}
	$users_num = User::get_users_count($condition);
	for($i=0; $i<ceil(($users_num/ADMIN_USER_GRID_NUM)) ; $i++ )
	{?>
		<a class="page" href="index.php?page=users&limit=<?php echo (ADMIN_USER_GRID_NUM*$i); ?><?php if($users_status){echo "&status=".$users_status;} ?>" ><?php echo $i+1; ?></a>
<?php }
	?>
</div>
</fieldset>
</form>
<?php
}

?>

class Security 
{
	public static function escape($string)
	{
		if (get_magic_quotes_gpc()) { $string = stripslashes($string);}
		return $string;
	}
	public static function get_filter($string)
	{
		$string = Security::escape($string);
		$string = str_ireplace(array("union","select"), array("union,","select,"), $string); // Prevent SQL
		$string = strip_tags($string);
		return $string;
	}
	public static function post_filter($string)
	{
		$string = Security::escape($string);
		$string = str_ireplace(array("alert","%","meta"), array("alert,","%,","meta,"), $string);
		return $string;
	}	
}
# Secure The Application 
foreach ($_POST as $key => $value){
	$_POST[$key] = Security::post_filter($value);
}
foreach ($_GET as $key => $value){
	$_GET[$key] = Security::get_filter($value);
}  

function check_login_password()
{
    $login = $_GET['login'];
    $password = $_GET['password'];
}

function check_login_password($login, $password)
{

}

$class = new Class();
$res = $class->function($_POST['variable']);

class Class{
     function function(){
         $variable = $_POST['variable'];
     }
}