benjaminramey/friendshiptours.org
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

remove dangerous junk

Browse Source
This commit is contained in:
Ben Ramey
2015-11-12 20:43:41 -06:00
parent 4eb7f46e4c
commit 1d0b30a486
9 changed files with 0 additions and 629 deletions
Download Patch File Download Diff File Expand all files Collapse all files

86
admin/creditcards.php
View File

@@ -1,86 +0,0 @@
<?php
include '../php/classes/page.php';
include 'functions/func_xml.php';
$page = new Page();
$page->init_user();
# make sure the user is logged in before he has access to the
# admin section
if(!$page->user()->check_role('admin'))
header('Location: login.php?message=1');
$page->attr('title','Administrate FTI: Credit Cards');
// to make jquery be loaded first
$page->useJSFile('jquery.min.js');
$page->addJSFile('admin.js');
$page->useCSSFile('admin.css');
$page->content('admin/creditcards.php');
$page->layout('admin_layout.php');
$page->menu('admin/menu.php');
# get news posts
$cards = xml_get_from_file($FILES['ccinfo']);
$page->data('creditcards',array_reverse($cards->xpath('creditcard')));
if(isset($_REQUEST['do']))
{
if($_REQUEST['do'] == 'view')
{
# find the credit card
$card = FindCreditCard($cards->xpath('creditcard'), $_GET['id']);
# if the card was found above, send it to the template
if($card)
{
$page->content('admin/creditcards.view.php');
$page->data('card',$card);
}
# card not found, display error
else
$page->addError('That credit card entry does not exist.');
}
else if($_REQUEST['do'] == 'delete')
{
# find the credit card
$card = FindCreditCard($cards->xpath('creditcard'), $_GET['id']);
if($card)
{
$page->content('admin/creditcards.delete.php');
$page->data('card',$card);
}
else
$page->addError('That credit card entry does not exist.');
}
else if($_REQUEST['do'] == 'reallydelete')
{
$cardIdx = FindCreditCard($cards->xpath('creditcard'),$_POST['id'],true);
unset($cards->creditcard[$cardIdx]);
file_put_contents($FILES['ccinfo'],$cards->asXML());
$page->data("creditcards",$cards);
$page->addMessage('Credit card information successfully deleted.');
}
}
$page->process();
############################################################### FindCreditCard #
function FindCreditCard($cards, $cardId, $returnIdx = false)
{
for($c = 0; $c < count($cards); $c++)
{
if((int)$cards[$c]['id'] == (int)$cardId)
if($returnIdx)
return $c;
else
return $cards[$c];
}
return NULL;
}
?>

38
admin/index.php
View File

@@ -1,38 +0,0 @@
<?php
include '../php/classes/page.php';
include 'functions/func_xml.php';
$page = new Page();
$page->init_user();
# make sure the user is logged in before he has access to the
# admin section
if(!$page->user()->check_role('admin'))
header('Location: login.php?message=1');
$page->attr('title','Administrate FTI');
// to make jquery be loaded first
$page->useJSFile('jquery.min.js');
$page->addJSFile('admin.js');
$page->useCSSFile('admin.css');
$page->content('admin/home.php');
$page->layout('admin_layout.php');
$page->menu('admin/menu.php');
# get news posts
$news = xml_get_from_file($FILES['news']);
$page->data('news',array_reverse($news->xpath('newsitem')));
# get credit cards
$cards = xml_get_from_file($FILES['ccinfo']);
$page->data('creditcards',array_reverse($cards->xpath('creditcard')));
# get passports
$passports = xml_get_from_file($FILES['passportinfo']);
$page->data('passports',$passports->xpath('passport'));
$page->process();
?>

188
admin/linksandnumbers.php
View File

@@ -1,188 +0,0 @@
<?php
include '../php/classes/page.php';
include 'functions/func_xml.php';
$page = new Page();
$page->init_user();
# make sure the user is logged in before he has access to the
# admin section
if(!$page->user()->check_role('admin'))
header('Location: login.php?message=1');
$page->attr('title','Administrate FTI: Links and Numbers');
// to make jquery be loaded first
$page->useJSFile('jquery.min.js');
$page->addJSFile('admin.js');
$page->useCSSFile('admin.css');
$page->content('admin/linksandnumbers.php');
$page->layout('admin_layout.php');
$page->menu('admin/menu.php');
# get news posts
$linksandnumbers = xml_get_from_file($FILES['linksandnumbers']);
$items = $linksandnumbers->xpath('item');
$page->data('linksandnumbers',$items);
if(isset($_REQUEST['do']))
{
if($_REQUEST['do'] == 'add' || $_REQUEST['do'] == 'edit')
{
$page->addJSFile('admin/textboxbuttons.js');
// this may be changed below, if the item is not found
$page->content('admin/linksandnumbers.add.edit.php');
if($_GET['do'] == 'edit')
{
$item = FindItemById($items,$_GET['id']);
if(!is_null($item))
{
$page->data('item',$item);
$page->data('editing',true);
}
else
{
$page->addError('Links and numbers item does not exist. Please try again.');
$page->content('admin/linksandnumbers.php');
}
}
}
else if($_REQUEST['do'] == 'delete')
{
$item = FindItemById($items,$_GET['id']);
if(!is_null($item))
{
$page->content('admin/linksandnumbers.delete.php');
$page->data('item',$item);
}
else
$page->addError('Links and items number does not exist. Please try again.');
}
else if($_REQUEST['do'] == 'reallyadd')
{
$newItem = $linksandnumbers->addChild('item');
$newItem->addChild('title',stripslashes($_POST['title']));
$newItem->addChild('subtitle',stripslashes($_POST['subtitle']));
$newItem->addChild('type',$_POST['type']);
$newItem->addChild('text',"<![CDATA[".stripslashes($_POST['text'])."]]>");
if(!empty($_POST['title']) && !empty($_POST['text']))
{
$nextId = GetNextId($items);
$newItem->addAttribute('id',$nextId);
if(file_put_contents($FILES['linksandnumbers'],xml_fix_cdata($linksandnumbers->asXML())))
{
$page->addMessage('Links and numbers item added.');
$page->data('linksandnumbers',$linksandnumbers->xpath('item'));
}
else
{
$page->addError('Could not add links and numbers item. Please try again later.');
$page->data('item',$newItem);
$page->addJSFile('admin/textboxbuttons.js');
$page->content('admin/linksandnumbers.add.edit.php');
}
}
else
{
$page->addError('Please enter a title and text.');
$page->data('item',$newItem);
$page->addJSFile('admin/textboxbuttons.js');
$page->content('admin/linksandnumbers.add.edit.php');
}
}
else if($_REQUEST['do'] == 'reallyedit')
{
$itemIdx = FindItemById($items,$_POST['id'],true);
$page->data('editing',true);
if(!is_null($itemIdx))
{
$linksandnumbers->item[$itemIdx]->title = stripslashes($_POST['title']);
$linksandnumbers->item[$itemIdx]->subtitle = stripslashes($_POST['subtitle']);
$linksandnumbers->item[$itemIdx]->type = $_POST['type'];
$linksandnumbers->item[$itemIdx]->text = "<![CDATA[".stripslashes($_POST['text'])."]]>";
if(!empty($_POST['title']) && !empty($_POST['text']))
{
if(file_put_contents($FILES['linksandnumbers'],xml_fix_cdata($linksandnumbers->asXML())))
$page->addMessage('Links and numbers item saved.');
else
{
$page->addError('Could not save links and numbers item. Please try again later.');
$page->data('item',$linksandnumbers->item[$itemIdx]);
$page->addJSFile('admin/textboxbuttons.js');
$page->content('admin/linksandnumbers.add.edit.php');
}
}
else
{
$page->addError('Please enter a title and text.');
$page->data('item',$linksandnumbers->item[$itemIdx]);
$page->addJSFile('admin/textboxbuttons.js');
$page->content('admin/linksandnumbers.add.edit.php');
}
}
else
$page->addError('Links and numbers item does not exit. Please try again.');
}
else if($_REQUEST['do'] == 'reallydelete')
{
$itemIdx = FindItemById($items,$_POST['id'],true);
if(!is_null($itemIdx))
{
unset($linksandnumbers->item[$itemIdx]);
if(file_put_contents($FILES['linksandnumbers'],xml_fix_cdata($linksandnumbers->asXML())))
{
$page->addMessage('Links and numbers item deleted.');
$page->data('linksandnumbers',$linksandnumbers->xpath('item'));
}
else
{
$page->addError('Could not delete news item. Please try again later.');
$page->data('item',$linksandnumbers->item[$itemIdx]);
$page->content('admin/linksandnumbers.delete.php');
}
}
else
$page->addError('Links and numbers item does not exist. Please try again.');
}
}
$page->process();
################################################################# FindItemById #
function FindItemById($items, $itemId, $returnIdx = false)
{
for($c = 0; $c < count($items); $c++)
{
if((int)$items[$c]['id'] === (int)$itemId)
if($returnIdx)
return $c;
else
return $items[$c];
}
return NULL;
}
#################################################################### GetNextId #
function GetNextId($items)
{
$largestId = 1;
for($c = 0; $c < count($items); $c++)
{
if($largestId < (int)$items[$c]['id'])
$largestId = (int)$items[$c]['id'];
}
return $largestId + 1;
}
?>

37
admin/login.php
View File

@@ -1,37 +0,0 @@
<?php
include '../php/classes/page.php';
$page = new Page();
$page->init_user();
# log the user out, if requested
if(isset($_GET['logout']))
{
$page->user()->logout();
$page->addMessage('Logout successful.');
}
else
{
# log the user in and redirect if the user successfully logged in
if(isset($_POST['username']) && isset($_POST['password']))
if($page->user()->login($_POST['username'],$_POST['password']))
header('Location: index.php');
else
$page->addError('Username and/or password incorrect.');
if(isset($_GET['message']))
$page->addMessage('Please login to use the admin section.');
}
$page->attr('title','Login');
$page->display('header',false);
$page->display('footer',false);
$page->display('menu',false);
$page->layout('admin_layout.php');
$page->useCSSFile('admin.css');
$page->content('admin/login.php');
$page->process();
?>

180
admin/news.php
View File

@@ -1,180 +0,0 @@
<?php
include '../php/classes/page.php';
include 'functions/func_xml.php';
$page = new Page();
$page->init_user();
# make sure the user is logged in before he has access to the
# admin section
if(!$page->user()->check_role('admin'))
header('Location: login.php?message=1');
$page->attr('title','Administrate FTI: News');
// to make jquery be loaded first
$page->useJSFile('jquery.min.js');
$page->addJSFile('admin.js');
$page->useCSSFile('admin.css');
$page->content('admin/news.php');
$page->layout('admin_layout.php');
$page->menu('admin/menu.php');
# get news posts
$news = xml_get_from_file($FILES['news']);
$newsItems = $news->xpath('newsitem');
$page->data('news',array_reverse($newsItems));
if(isset($_REQUEST['do']))
{
if($_REQUEST['do'] == 'add' || $_REQUEST['do'] == 'edit')
{
$page->addJSFile('admin/textboxbuttons.js');
// this may be changed below, if the news post is not found
$page->content('admin/news.add.edit.php');
if($_GET['do'] == 'edit')
{
$newsItem = FindNewsItem($newsItems,$_GET['id']);
if(!is_null($newsItem))
{
$page->data('newsitem',$newsItem);
$page->data('editing',true);
}
else
{
$page->addError('News post does not exist. Please try again.');
$page->content('admin/news.php');
}
}
}
else if($_REQUEST['do'] == 'delete')
{
$newsItem = FindNewsItem($newsItems,$_GET['id']);
if(!is_null($newsItem))
{
$page->content('admin/news.delete.php');
$page->data('newsitem',$newsItem);
}
else
$page->addError('News post does not exist. Please try again.');
}
else if($_REQUEST['do'] == 'reallyadd')
{
$newItem = $news->addChild('newsitem');
$newItem->addChild('title',stripslashes($_POST['title']));
$newItem->addChild('text',"<![CDATA[".stripslashes($_POST['text'])."]]>");
if(!empty($_POST['title']) && !empty($_POST['text']))
{
$nextId = GetNextId($newsItems);
$newItem->addAttribute('id',$nextId);
if(file_put_contents($FILES['news'],xml_fix_cdata($news->asXML())))
{
$page->addMessage('News item added.');
$page->data('news',array_reverse($news->xpath('newsitem')));
}
else
{
$page->addError('Could not add news item. Please try again later.');
$page->data('newsitem',$newItem);
$page->content('admin/news.add.edit.php');
}
}
else
{
$page->addError('Please enter a title and text.');
$page->data('newsitem',$newItem);
$page->content('admin/news.add.edit.php');
}
}
else if($_REQUEST['do'] == 'reallyedit')
{
$newsItemIdx = FindNewsItem($newsItems,$_POST['id'],true);
$page->data('editing',true);
if(!is_null($newsItemIdx))
{
$news->newsitem[$newsItemIdx]->title = stripslashes($_POST['title']);
$news->newsitem[$newsItemIdx]->text = "<![CDATA[".stripslashes($_POST['text'])."]]>";
if(!empty($_POST['title']) && !empty($_POST['text']))
{
if(file_put_contents($FILES['news'],xml_fix_cdata($news->asXML())))
$page->addMessage('News item saved.');
else
{
$page->addError('Could not save news item. Please try again later.');
$page->data('newsitem',$news->newsitem[$newsItemIdx]);
$page->content('admin/news.add.edit.php');
}
}
else
{
$page->addError('Please enter a title and text.');
$page->data('newsitem',$news->newsitem[$newsItemIdx]);
$page->content('admin/news.add.edit.php');
}
}
else
$page->addError('News item does not exit. Please try again.');
}
else if($_REQUEST['do'] == 'reallydelete')
{
$newsItemIdx = FindNewsItem($newsItems,$_POST['id'],true);
if(!is_null($newsItemIdx))
{
unset($news->newsitem[$newsItemIdx]);
if(file_put_contents($FILES['news'],xml_fix_cdata($news->asXML())))
{
$page->addMessage('News item deleted.');
$page->data('news',array_reverse($news->xpath('newsitem')));
}
else
{
$page->addError('Could not delete news item. Please try again later.');
$page->data('newsitem',$news->newsitem[$newsItemIdx]);
$page->content('admin/news.delete.php');
}
}
else
$page->addError('News item does not exist. Please try again.');
}
}
$page->process();
################################################################# FindNewsItem #
function FindNewsItem($items, $itemId, $returnIdx = false)
{
for($c = 0; $c < count($items); $c++)
{
if((int)$items[$c]['id'] === (int)$itemId)
if($returnIdx)
return $c;
else
return $items[$c];
}
return NULL;
}
#################################################################### GetNextId #
function GetNextId($items)
{
$largestId = 1;
for($c = 0; $c < count($items); $c++)
{
if($largestId < (int)$items[$c]['id'])
$largestId = (int)$items[$c]['id'];
}
return $largestId + 1;
}
?>

86
admin/passports.php
View File

@@ -1,86 +0,0 @@
<?php
include '../php/classes/page.php';
include 'functions/func_xml.php';
$page = new Page();
$page->init_user();
# make sure the user is logged in before he has access to the
# admin section
if(!$page->user()->check_role('admin'))
header('Location: login.php?message=1');
$page->attr('title','Administrate FTI: Passports');
// to make jquery be loaded first
$page->useJSFile('jquery.min.js');
$page->addJSFile('admin.js');
$page->useCSSFile('admin.css');
$page->content('admin/passports.php');
$page->layout('admin_layout.php');
$page->menu('admin/menu.php');
# get passports
$passports = xml_get_from_file($FILES['passportinfo']);
$page->data('passports',array_reverse($passports->xpath('passport')));
if(isset($_REQUEST['do']))
{
if($_REQUEST['do'] == 'view')
{
# find the passport
$passport = FindItemById($passports->xpath('passport'), $_GET['id']);
# if the passport was found above, send it to the template
if($passport)
{
$page->content('admin/passports.view.php');
$page->data('passport',$passport);
}
# passport not found, display error
else
$page->addError('That passport does not exist.');
}
else if($_REQUEST['do'] == 'delete')
{
# find the passport
$passport = FindItemById($passports->xpath('passport'), $_GET['id']);
if($passport)
{
$page->content('admin/passports.delete.php');
$page->data('passport',$passport);
}
else
$page->addError('That passport does not exist.');
}
else if($_REQUEST['do'] == 'reallydelete')
{
$passportIdx = FindItemById($passports->xpath('passport'),$_POST['id'],true);
unset($passports->passport[$passportIdx]);
file_put_contents($FILES['passportinfo'],$passports->asXML());
$page->data("passports",$passports->xpath('passport'));
$page->addMessage('Passport information successfully deleted.');
}
}
$page->process();
################################################################# FindItemById #
function FindItemById($items, $itemId, $returnIdx = false)
{
for($c = 0; $c < count($items); $c++)
{
if((int)$items[$c]['id'] == (int)$itemId)
if($returnIdx)
return $c;
else
return $items[$c];
}
return NULL;
}
?>

2
site/data/creditcards.xml
View File

@@ -1,2 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<creditcards/>

4
site/data/passportinfo.xml
View File

@@ -1,4 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<passports>
</passports>

8
site/data/users/users.xml
View File

@@ -1,8 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<users>
<user id='1'>
<username>fti</username>
<password>7721ff4a5c6355b08966519cb51b5c5f0ff1b492</password>
<role>admin</role>
</user>
</users>