\n
$report
\n\n"; if( !$user_digest ) { $return_html .= AdminLogin(); } else if( $user_digest ) { $return_html .= AdminIndex(); } $return_html .= "\n"; return( $return_html ); } function AdminLogin() { $login_html = "
Login:
Password:
"; return($login_html); } function AdminIndex() { $post_types = array("news","requests","big_requests","great_stuff","austria_trip"); $post_tables = array("news" => "news_posts", "requests" => "requests_posts", "big_requests" => "bigrequests_posts", "great_stuff" => "greatstuff_posts", 'austria_trip' => 'austriatrip_posts' ); $index_html = "
Admin Panel
Add Post
post type:

title:

author:

content:

Edit Posts
post type:
"; foreach($post_types as $type) { if($type == 'news') { $visible = "style='visibility:visible;'"; } else { $visible = "style='visibility:hidden;'"; } $index_html .= "
Select $type post:
"; } $index_html .= "
edit post
delete post

"; return($index_html); } function VerifyUser() { $digest = mysql_query("SELECT Value FROM rlinks_security WHERE Variable = 'Digest';"); $digest = mysql_fetch_assoc($digest); $digest = $digest['Value']; if( $_COOKIE['RLINKSDIGEST'] == $digest ) { return $digest; } else if( $_POST['user'] == "" or $_POST['password'] == "" ) { return false; } $phrase = mysql_query("SELECT Value FROM rlinks_security WHERE Variable = 'Phrase';"); $phrase = mysql_fetch_assoc($phrase); $phrase = $phrase['Value']; $user_password = $_POST['password']; $user_login = $_POST['user']; $user_digest = sha1("$user_login^$user_password^$phrase"); if( $user_digest == $digest ) { return $user_digest; } else { return false; } } function AddPost($type) { $dbs = array( 'news' => 'news_posts', 'requests' => 'requests_posts', 'big_requests' => 'bigrequests_posts', 'great_stuff' => 'greatstuff_posts', 'austria_trip' => 'austriatrip_posts' ); if( !(VerifyUser()) ) { return; } $content = addslashes($_POST['content']); $author = addslashes($_POST['author']); $title = addslashes($_POST['title']); $query = mysql_query("INSERT INTO {$dbs[$type]} (Title,Author,Content,Date,NumComments) VALUES ('$title','$author','$content',UNIX_TIMESTAMP(NOW()),0);"); if( $query ) { return "Successfully added post."; } else { return "Could not add post."; } } function DeletePost($type) { $dbs = array( 'news' => 'news_posts', 'requests' => 'requests_posts', 'big_requests' => 'bigrequests_posts', 'great_stuff' => 'greatstuff_posts', 'austria_trip' => 'austriatrip_posts' ); if( !(VerifyUser()) ) { return; } $query = mysql_query("DELETE FROM {$dbs[$type]} WHERE ID = {$_POST[$dbs[$type]]} LIMIT 1;" ); if($query) { return "Post successfully deleted."; } else { return "Post could not be deleted."; } } function EditPost($type) { $dbs = array( 'news' => 'news_posts', 'requests' => 'requests_posts', 'big_requests' => 'bigrequests_posts', 'great_stuff' => 'greatstuff_posts', 'austria_trip' => 'austriatrip_posts' ); if( !(VerifyUser()) ) { return; } if( !(isset($_POST['doediting'])) ) { $edit_html = "
"; $post_id = $_POST[$dbs[$type]]; $post = mysql_query("SELECT * FROM {$dbs[$type]} WHERE ID = $post_id LIMIT 1;"); $post = mysql_fetch_assoc( $post ); $post['Title'] = stripslashes($post['Title']); $post['Content'] = stripslashes($post['Content']); $post['Author'] = stripslashes($post['Author']); $edit_html .="
Edit Post
Title:

Author:

Content:


"; $edit_html .= "
"; } else { if( isset($_POST['id']) ) { $content = addslashes($_POST['content']); $title = addslashes($_POST['title']); $author = addslashes($_POST['author']); $query = mysql_query("UPDATE {$dbs[$type]} SET Content = '$content', Title = '$title', Author = '$author' WHERE ID = {$_POST['id']} LIMIT 1;"); print mysql_error(); if( $query ) { $edit_html .= "Successfully edited post.
\n\n"; } else { $edit_html .= "Could not edit post.
\n\n"; } } } return( $edit_html ); } function SetAdminCookie($p_digest) { setcookie('RLINKSDIGEST',$p_digest,time() + (30*60),'/'); } ?>