From 1d0b30a486e5a7c0206a6ac00486c4b01b8842f8 Mon Sep 17 00:00:00 2001 From: Ben Ramey Date: Thu, 12 Nov 2015 20:43:41 -0600 Subject: [PATCH] remove dangerous junk --- admin/creditcards.php | 86 ----------------- admin/index.php | 38 -------- admin/linksandnumbers.php | 188 ------------------------------------- admin/login.php | 37 -------- admin/news.php | 180 ----------------------------------- admin/passports.php | 86 ----------------- site/data/creditcards.xml | 2 - site/data/passportinfo.xml | 4 - site/data/users/users.xml | 8 -- 9 files changed, 629 deletions(-) delete mode 100644 admin/creditcards.php delete mode 100644 admin/index.php delete mode 100644 admin/linksandnumbers.php delete mode 100644 admin/login.php delete mode 100644 admin/news.php delete mode 100644 admin/passports.php delete mode 100755 site/data/creditcards.xml delete mode 100755 site/data/passportinfo.xml delete mode 100644 site/data/users/users.xml diff --git a/admin/creditcards.php b/admin/creditcards.php deleted file mode 100644 index 6740242..0000000 --- a/admin/creditcards.php +++ /dev/null @@ -1,86 +0,0 @@ -init_user(); - -# make sure the user is logged in before he has access to the -# admin section -if(!$page->user()->check_role('admin')) - header('Location: login.php?message=1'); - -$page->attr('title','Administrate FTI: Credit Cards'); -// to make jquery be loaded first -$page->useJSFile('jquery.min.js'); -$page->addJSFile('admin.js'); -$page->useCSSFile('admin.css'); - -$page->content('admin/creditcards.php'); -$page->layout('admin_layout.php'); -$page->menu('admin/menu.php'); - -# get news posts -$cards = xml_get_from_file($FILES['ccinfo']); -$page->data('creditcards',array_reverse($cards->xpath('creditcard'))); - -if(isset($_REQUEST['do'])) -{ - if($_REQUEST['do'] == 'view') - { - # find the credit card - $card = FindCreditCard($cards->xpath('creditcard'), $_GET['id']); - - # if the card was found above, send it to the template - if($card) - { - $page->content('admin/creditcards.view.php'); - $page->data('card',$card); - } - # card not found, display error - else - $page->addError('That credit card entry does not exist.'); - } - else if($_REQUEST['do'] == 'delete') - { - # find the credit card - $card = FindCreditCard($cards->xpath('creditcard'), $_GET['id']); - - if($card) - { - $page->content('admin/creditcards.delete.php'); - $page->data('card',$card); - } - else - $page->addError('That credit card entry does not exist.'); - } - else if($_REQUEST['do'] == 'reallydelete') - { - $cardIdx = FindCreditCard($cards->xpath('creditcard'),$_POST['id'],true); - unset($cards->creditcard[$cardIdx]); - file_put_contents($FILES['ccinfo'],$cards->asXML()); - - $page->data("creditcards",$cards); - $page->addMessage('Credit card information successfully deleted.'); - } -} - -$page->process(); - -############################################################### FindCreditCard # -function FindCreditCard($cards, $cardId, $returnIdx = false) -{ - for($c = 0; $c < count($cards); $c++) - { - if((int)$cards[$c]['id'] == (int)$cardId) - if($returnIdx) - return $c; - else - return $cards[$c]; - } - - return NULL; -} - -?> \ No newline at end of file diff --git a/admin/index.php b/admin/index.php deleted file mode 100644 index 7311387..0000000 --- a/admin/index.php +++ /dev/null @@ -1,38 +0,0 @@ -init_user(); - -# make sure the user is logged in before he has access to the -# admin section -if(!$page->user()->check_role('admin')) - header('Location: login.php?message=1'); - -$page->attr('title','Administrate FTI'); -// to make jquery be loaded first -$page->useJSFile('jquery.min.js'); -$page->addJSFile('admin.js'); -$page->useCSSFile('admin.css'); - -$page->content('admin/home.php'); -$page->layout('admin_layout.php'); -$page->menu('admin/menu.php'); - -# get news posts -$news = xml_get_from_file($FILES['news']); -$page->data('news',array_reverse($news->xpath('newsitem'))); - -# get credit cards -$cards = xml_get_from_file($FILES['ccinfo']); -$page->data('creditcards',array_reverse($cards->xpath('creditcard'))); - -# get passports -$passports = xml_get_from_file($FILES['passportinfo']); -$page->data('passports',$passports->xpath('passport')); - -$page->process(); - -?> \ No newline at end of file diff --git a/admin/linksandnumbers.php b/admin/linksandnumbers.php deleted file mode 100644 index 68d427a..0000000 --- a/admin/linksandnumbers.php +++ /dev/null @@ -1,188 +0,0 @@ -init_user(); - -# make sure the user is logged in before he has access to the -# admin section -if(!$page->user()->check_role('admin')) - header('Location: login.php?message=1'); - -$page->attr('title','Administrate FTI: Links and Numbers'); -// to make jquery be loaded first -$page->useJSFile('jquery.min.js'); -$page->addJSFile('admin.js'); -$page->useCSSFile('admin.css'); - -$page->content('admin/linksandnumbers.php'); -$page->layout('admin_layout.php'); -$page->menu('admin/menu.php'); - -# get news posts -$linksandnumbers = xml_get_from_file($FILES['linksandnumbers']); -$items = $linksandnumbers->xpath('item'); -$page->data('linksandnumbers',$items); - -if(isset($_REQUEST['do'])) -{ - if($_REQUEST['do'] == 'add' || $_REQUEST['do'] == 'edit') - { - $page->addJSFile('admin/textboxbuttons.js'); - // this may be changed below, if the item is not found - $page->content('admin/linksandnumbers.add.edit.php'); - - if($_GET['do'] == 'edit') - { - $item = FindItemById($items,$_GET['id']); - - if(!is_null($item)) - { - $page->data('item',$item); - $page->data('editing',true); - } - else - { - $page->addError('Links and numbers item does not exist. Please try again.'); - $page->content('admin/linksandnumbers.php'); - } - } - } - else if($_REQUEST['do'] == 'delete') - { - $item = FindItemById($items,$_GET['id']); - - if(!is_null($item)) - { - $page->content('admin/linksandnumbers.delete.php'); - $page->data('item',$item); - } - else - $page->addError('Links and items number does not exist. Please try again.'); - } - else if($_REQUEST['do'] == 'reallyadd') - { - $newItem = $linksandnumbers->addChild('item'); - $newItem->addChild('title',stripslashes($_POST['title'])); - $newItem->addChild('subtitle',stripslashes($_POST['subtitle'])); - $newItem->addChild('type',$_POST['type']); - $newItem->addChild('text',""); - - if(!empty($_POST['title']) && !empty($_POST['text'])) - { - $nextId = GetNextId($items); - $newItem->addAttribute('id',$nextId); - - if(file_put_contents($FILES['linksandnumbers'],xml_fix_cdata($linksandnumbers->asXML()))) - { - $page->addMessage('Links and numbers item added.'); - $page->data('linksandnumbers',$linksandnumbers->xpath('item')); - } - else - { - $page->addError('Could not add links and numbers item. Please try again later.'); - $page->data('item',$newItem); - $page->addJSFile('admin/textboxbuttons.js'); - $page->content('admin/linksandnumbers.add.edit.php'); - } - } - else - { - $page->addError('Please enter a title and text.'); - $page->data('item',$newItem); - $page->addJSFile('admin/textboxbuttons.js'); - $page->content('admin/linksandnumbers.add.edit.php'); - } - } - else if($_REQUEST['do'] == 'reallyedit') - { - $itemIdx = FindItemById($items,$_POST['id'],true); - $page->data('editing',true); - - if(!is_null($itemIdx)) - { - $linksandnumbers->item[$itemIdx]->title = stripslashes($_POST['title']); - $linksandnumbers->item[$itemIdx]->subtitle = stripslashes($_POST['subtitle']); - $linksandnumbers->item[$itemIdx]->type = $_POST['type']; - $linksandnumbers->item[$itemIdx]->text = ""; - - if(!empty($_POST['title']) && !empty($_POST['text'])) - { - if(file_put_contents($FILES['linksandnumbers'],xml_fix_cdata($linksandnumbers->asXML()))) - $page->addMessage('Links and numbers item saved.'); - else - { - $page->addError('Could not save links and numbers item. Please try again later.'); - $page->data('item',$linksandnumbers->item[$itemIdx]); - $page->addJSFile('admin/textboxbuttons.js'); - $page->content('admin/linksandnumbers.add.edit.php'); - } - } - else - { - $page->addError('Please enter a title and text.'); - $page->data('item',$linksandnumbers->item[$itemIdx]); - $page->addJSFile('admin/textboxbuttons.js'); - $page->content('admin/linksandnumbers.add.edit.php'); - } - } - else - $page->addError('Links and numbers item does not exit. Please try again.'); - } - else if($_REQUEST['do'] == 'reallydelete') - { - $itemIdx = FindItemById($items,$_POST['id'],true); - if(!is_null($itemIdx)) - { - unset($linksandnumbers->item[$itemIdx]); - - if(file_put_contents($FILES['linksandnumbers'],xml_fix_cdata($linksandnumbers->asXML()))) - { - $page->addMessage('Links and numbers item deleted.'); - $page->data('linksandnumbers',$linksandnumbers->xpath('item')); - } - else - { - $page->addError('Could not delete news item. Please try again later.'); - $page->data('item',$linksandnumbers->item[$itemIdx]); - $page->content('admin/linksandnumbers.delete.php'); - } - } - else - $page->addError('Links and numbers item does not exist. Please try again.'); - } -} - -$page->process(); - -################################################################# FindItemById # -function FindItemById($items, $itemId, $returnIdx = false) -{ - for($c = 0; $c < count($items); $c++) - { - if((int)$items[$c]['id'] === (int)$itemId) - if($returnIdx) - return $c; - else - return $items[$c]; - } - - return NULL; -} - -#################################################################### GetNextId # -function GetNextId($items) -{ - $largestId = 1; - for($c = 0; $c < count($items); $c++) - { - if($largestId < (int)$items[$c]['id']) - $largestId = (int)$items[$c]['id']; - } - - return $largestId + 1; -} - -?> \ No newline at end of file diff --git a/admin/login.php b/admin/login.php deleted file mode 100644 index 4a43b58..0000000 --- a/admin/login.php +++ /dev/null @@ -1,37 +0,0 @@ -init_user(); - -# log the user out, if requested -if(isset($_GET['logout'])) -{ - $page->user()->logout(); - $page->addMessage('Logout successful.'); -} -else -{ - # log the user in and redirect if the user successfully logged in - if(isset($_POST['username']) && isset($_POST['password'])) - if($page->user()->login($_POST['username'],$_POST['password'])) - header('Location: index.php'); - else - $page->addError('Username and/or password incorrect.'); - - if(isset($_GET['message'])) - $page->addMessage('Please login to use the admin section.'); -} - -$page->attr('title','Login'); -$page->display('header',false); -$page->display('footer',false); -$page->display('menu',false); -$page->layout('admin_layout.php'); -$page->useCSSFile('admin.css'); -$page->content('admin/login.php'); - -$page->process(); - -?> \ No newline at end of file diff --git a/admin/news.php b/admin/news.php deleted file mode 100644 index f28b0de..0000000 --- a/admin/news.php +++ /dev/null @@ -1,180 +0,0 @@ -init_user(); - -# make sure the user is logged in before he has access to the -# admin section -if(!$page->user()->check_role('admin')) - header('Location: login.php?message=1'); - -$page->attr('title','Administrate FTI: News'); -// to make jquery be loaded first -$page->useJSFile('jquery.min.js'); -$page->addJSFile('admin.js'); -$page->useCSSFile('admin.css'); - -$page->content('admin/news.php'); -$page->layout('admin_layout.php'); -$page->menu('admin/menu.php'); - -# get news posts -$news = xml_get_from_file($FILES['news']); -$newsItems = $news->xpath('newsitem'); -$page->data('news',array_reverse($newsItems)); - -if(isset($_REQUEST['do'])) -{ - if($_REQUEST['do'] == 'add' || $_REQUEST['do'] == 'edit') - { - $page->addJSFile('admin/textboxbuttons.js'); - // this may be changed below, if the news post is not found - $page->content('admin/news.add.edit.php'); - - if($_GET['do'] == 'edit') - { - $newsItem = FindNewsItem($newsItems,$_GET['id']); - - if(!is_null($newsItem)) - { - $page->data('newsitem',$newsItem); - $page->data('editing',true); - } - else - { - $page->addError('News post does not exist. Please try again.'); - $page->content('admin/news.php'); - } - } - } - else if($_REQUEST['do'] == 'delete') - { - $newsItem = FindNewsItem($newsItems,$_GET['id']); - - if(!is_null($newsItem)) - { - $page->content('admin/news.delete.php'); - $page->data('newsitem',$newsItem); - } - else - $page->addError('News post does not exist. Please try again.'); - } - else if($_REQUEST['do'] == 'reallyadd') - { - $newItem = $news->addChild('newsitem'); - $newItem->addChild('title',stripslashes($_POST['title'])); - $newItem->addChild('text',""); - - if(!empty($_POST['title']) && !empty($_POST['text'])) - { - $nextId = GetNextId($newsItems); - $newItem->addAttribute('id',$nextId); - - if(file_put_contents($FILES['news'],xml_fix_cdata($news->asXML()))) - { - $page->addMessage('News item added.'); - $page->data('news',array_reverse($news->xpath('newsitem'))); - } - else - { - $page->addError('Could not add news item. Please try again later.'); - $page->data('newsitem',$newItem); - $page->content('admin/news.add.edit.php'); - } - } - else - { - $page->addError('Please enter a title and text.'); - $page->data('newsitem',$newItem); - $page->content('admin/news.add.edit.php'); - } - } - else if($_REQUEST['do'] == 'reallyedit') - { - $newsItemIdx = FindNewsItem($newsItems,$_POST['id'],true); - $page->data('editing',true); - - if(!is_null($newsItemIdx)) - { - $news->newsitem[$newsItemIdx]->title = stripslashes($_POST['title']); - $news->newsitem[$newsItemIdx]->text = ""; - - if(!empty($_POST['title']) && !empty($_POST['text'])) - { - if(file_put_contents($FILES['news'],xml_fix_cdata($news->asXML()))) - $page->addMessage('News item saved.'); - else - { - $page->addError('Could not save news item. Please try again later.'); - $page->data('newsitem',$news->newsitem[$newsItemIdx]); - $page->content('admin/news.add.edit.php'); - } - } - else - { - $page->addError('Please enter a title and text.'); - $page->data('newsitem',$news->newsitem[$newsItemIdx]); - $page->content('admin/news.add.edit.php'); - } - } - else - $page->addError('News item does not exit. Please try again.'); - } - else if($_REQUEST['do'] == 'reallydelete') - { - $newsItemIdx = FindNewsItem($newsItems,$_POST['id'],true); - if(!is_null($newsItemIdx)) - { - unset($news->newsitem[$newsItemIdx]); - - if(file_put_contents($FILES['news'],xml_fix_cdata($news->asXML()))) - { - $page->addMessage('News item deleted.'); - $page->data('news',array_reverse($news->xpath('newsitem'))); - } - else - { - $page->addError('Could not delete news item. Please try again later.'); - $page->data('newsitem',$news->newsitem[$newsItemIdx]); - $page->content('admin/news.delete.php'); - } - } - else - $page->addError('News item does not exist. Please try again.'); - } -} - -$page->process(); - -################################################################# FindNewsItem # -function FindNewsItem($items, $itemId, $returnIdx = false) -{ - for($c = 0; $c < count($items); $c++) - { - if((int)$items[$c]['id'] === (int)$itemId) - if($returnIdx) - return $c; - else - return $items[$c]; - } - - return NULL; -} - -#################################################################### GetNextId # -function GetNextId($items) -{ - $largestId = 1; - for($c = 0; $c < count($items); $c++) - { - if($largestId < (int)$items[$c]['id']) - $largestId = (int)$items[$c]['id']; - } - - return $largestId + 1; -} - -?> \ No newline at end of file diff --git a/admin/passports.php b/admin/passports.php deleted file mode 100644 index d14d537..0000000 --- a/admin/passports.php +++ /dev/null @@ -1,86 +0,0 @@ -init_user(); - -# make sure the user is logged in before he has access to the -# admin section -if(!$page->user()->check_role('admin')) - header('Location: login.php?message=1'); - -$page->attr('title','Administrate FTI: Passports'); -// to make jquery be loaded first -$page->useJSFile('jquery.min.js'); -$page->addJSFile('admin.js'); -$page->useCSSFile('admin.css'); - -$page->content('admin/passports.php'); -$page->layout('admin_layout.php'); -$page->menu('admin/menu.php'); - -# get passports -$passports = xml_get_from_file($FILES['passportinfo']); -$page->data('passports',array_reverse($passports->xpath('passport'))); - -if(isset($_REQUEST['do'])) -{ - if($_REQUEST['do'] == 'view') - { - # find the passport - $passport = FindItemById($passports->xpath('passport'), $_GET['id']); - - # if the passport was found above, send it to the template - if($passport) - { - $page->content('admin/passports.view.php'); - $page->data('passport',$passport); - } - # passport not found, display error - else - $page->addError('That passport does not exist.'); - } - else if($_REQUEST['do'] == 'delete') - { - # find the passport - $passport = FindItemById($passports->xpath('passport'), $_GET['id']); - - if($passport) - { - $page->content('admin/passports.delete.php'); - $page->data('passport',$passport); - } - else - $page->addError('That passport does not exist.'); - } - else if($_REQUEST['do'] == 'reallydelete') - { - $passportIdx = FindItemById($passports->xpath('passport'),$_POST['id'],true); - unset($passports->passport[$passportIdx]); - file_put_contents($FILES['passportinfo'],$passports->asXML()); - - $page->data("passports",$passports->xpath('passport')); - $page->addMessage('Passport information successfully deleted.'); - } -} - -$page->process(); - -################################################################# FindItemById # -function FindItemById($items, $itemId, $returnIdx = false) -{ - for($c = 0; $c < count($items); $c++) - { - if((int)$items[$c]['id'] == (int)$itemId) - if($returnIdx) - return $c; - else - return $items[$c]; - } - - return NULL; -} - -?> \ No newline at end of file diff --git a/site/data/creditcards.xml b/site/data/creditcards.xml deleted file mode 100755 index 29dfc98..0000000 --- a/site/data/creditcards.xml +++ /dev/null @@ -1,2 +0,0 @@ - - diff --git a/site/data/passportinfo.xml b/site/data/passportinfo.xml deleted file mode 100755 index e8c84e8..0000000 --- a/site/data/passportinfo.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - diff --git a/site/data/users/users.xml b/site/data/users/users.xml deleted file mode 100644 index d5de524..0000000 --- a/site/data/users/users.xml +++ /dev/null @@ -1,8 +0,0 @@ - - - - fti - 7721ff4a5c6355b08966519cb51b5c5f0ff1b492 - admin - - \ No newline at end of file