summary refs log tree commit diff stats
path: root/pages/admin.php
diff options
context:
space:
mode:
authorStarla Insigna <hatkirby@fourisland.com>2009-01-05 18:01:06 -0500
committerStarla Insigna <hatkirby@fourisland.com>2009-01-05 18:01:06 -0500
commit38f73720eaec5f49752589ac088b04b3fa734117 (patch)
treeb1d809406de7980925223cbcbdd974a2c074d13f /pages/admin.php
parent646c11fb40bdd3e80e6b2ec168eaa05eae23e68e (diff)
downloadfourisland-38f73720eaec5f49752589ac088b04b3fa734117.tar.gz
fourisland-38f73720eaec5f49752589ac088b04b3fa734117.tar.bz2
fourisland-38f73720eaec5f49752589ac088b04b3fa734117.zip
Integreated Fourm users
Diffstat (limited to 'pages/admin.php')
-rwxr-xr-xpages/admin.php18


1 files changed, 9 insertions, 9 deletions
diff --git a/pages/admin.php b/pages/admin.php
index a3b1783..60bc73d 100755
--- a/pages/admin.php
+++ b/pages/admin.php

@@ -26,7 +26,7 @@ $pageCategory = 'panel';

26
26

27if (isLoggedIn())
27if (isLoggedIn())

28{
28{

29        if (getUserlevel() == 1)
29        if (isAdmin())

30        {
30        {

31                if (!isset($_GET['page']))
31                if (!isset($_GET['page']))

32                {
32                {
@@ -41,7 +41,7 @@ if (isLoggedIn())

41
41

42                                if ($_POST['type'] == 'draft')
42                                if ($_POST['type'] == 'draft')

43                                {
43                                {

44                                        $insdraft = "INSERT INTO drafts (title,author,text,slug) VALUES (\"" . mysql_real_escape_string($_POST['title']) . "\",\"" . sess_get('uname') . "\",\"" . mysql_real_escape_string($_POST['text']) . "\",\"" . generateSlug($_POST['title'],'updates') . "\")";
44                                        $insdraft = "INSERT INTO drafts (title,author,text,slug) VALUES (\"" . mysql_real_escape_string($_POST['title']) . "\",\"" . getSessionUsername() . "\",\"" . mysql_real_escape_string($_POST['text']) . "\",\"" . generateSlug($_POST['title'],'updates') . "\")";

45                                        $insdraft2 = mysql_query($insdraft);
45                                        $insdraft2 = mysql_query($insdraft);

46
46

47                                        $id = mysql_insert_id();
47                                        $id = mysql_insert_id();
@@ -51,7 +51,7 @@ if (isLoggedIn())

51                                        $template->add('ID', $id);
51                                        $template->add('ID', $id);

52                                } else if ($_POST['type'] == 'instant')
52                                } else if ($_POST['type'] == 'instant')

53                                {
53                                {

54                                        $id = postBlogPost($_POST['title'], sess_get('uname'), $tags, $_POST['text']);
54                                        $id = postBlogPost($_POST['title'], getSessionUsername(), $tags, $_POST['text']);

55
55

56                                        $getpost = "SELECT * FROM updates WHERE id = " . $id;
56                                        $getpost = "SELECT * FROM updates WHERE id = " . $id;

57                                        $getpost2 = mysql_query($getpost);
57                                        $getpost2 = mysql_query($getpost);
@@ -87,7 +87,7 @@ if (isLoggedIn())

87                                                generateError(404);
87                                                generateError(404);

88                                        }
88                                        }

89
89

90                                        $inspending = "INSERT INTO pending (id,title,author,text,slug) VALUES (" . $id . ",\"" . mysql_real_escape_string($_POST['title']) . "\",\"" . sess_get('uname') . "\",\"" . mysql_real_escape_string($_POST['text']) . "\",\"" . generateSlug($_POST['title'],'updates') . "\")";
90                                        $inspending = "INSERT INTO pending (id,title,author,text,slug) VALUES (" . $id . ",\"" . mysql_real_escape_string($_POST['title']) . "\",\"" . getSessionUsername() . "\",\"" . mysql_real_escape_string($_POST['text']) . "\",\"" . generateSlug($_POST['title'],'updates') . "\")";

91                                        $inspending2 = mysql_query($inspending);
91                                        $inspending2 = mysql_query($inspending);

92
92

93                                        addTags($id, $tags, 'pending');
93                                        addTags($id, $tags, 'pending');
@@ -140,7 +140,7 @@ if (isLoggedIn())

140                                                $template->add('ID', $_GET['id']);
140                                                $template->add('ID', $_GET['id']);

141                                        } else if ($_POST['type'] == 'instant')
141                                        } else if ($_POST['type'] == 'instant')

142                                        {
142                                        {

143                                                $id = postBlogPost($_POST['title'], sess_get('uname'), $tags, $_POST['text']);
143                                                $id = postBlogPost($_POST['title'], getSessionUsername(), $tags, $_POST['text']);

144
144

145                                                $deldraft = "DELETE FROM drafts WHERE id = " . $_GET['id'];
145                                                $deldraft = "DELETE FROM drafts WHERE id = " . $_GET['id'];

146                                                $deldraft2 = mysql_query($deldraft);
146                                                $deldraft2 = mysql_query($deldraft);
@@ -179,7 +179,7 @@ if (isLoggedIn())

179                                                        generateError(404);
179                                                        generateError(404);

180                                                }
180                                                }

181
181

182                                                $inspending = "INSERT INTO pending (id,title,author,text,slug) VALUES (" . $id . ",\"" . mysql_real_escape_string($_POST['title']) . "\",\"" . sess_get('uname') . "\",\"" . mysql_real_escape_string($_POST['text']) . "\",\"" . generateSlug($_POST['title'],'updates') . "\")";
182                                                $inspending = "INSERT INTO pending (id,title,author,text,slug) VALUES (" . $id . ",\"" . mysql_real_escape_string($_POST['title']) . "\",\"" . getSessionUsername() . "\",\"" . mysql_real_escape_string($_POST['text']) . "\",\"" . generateSlug($_POST['title'],'updates') . "\")";

183                                                $inspending2 = mysql_query($inspending);
183                                                $inspending2 = mysql_query($inspending);

184
184

185                                                addTags($id, $tags, 'pending');
185                                                addTags($id, $tags, 'pending');
@@ -539,14 +539,14 @@ if (isLoggedIn())

539
539

540                        if ($getcomment3['id'] == $_GET['id'])
540                        if ($getcomment3['id'] == $_GET['id'])

541                        {
541                        {

542                                $getuser = "SELECT * FROM users WHERE username = \"" . $getcomment3['author'] . "\"";
542                                $getuser = "SELECT * FROM phpbb_users WHERE username = \"" . $getcomment3['author'] . "\"";

543                                $getuser2 = mysql_query($getuser);
543                                $getuser2 = mysql_query($getuser);

544                                $getuser3 = mysql_fetch_array($getuser2);
544                                $getuser3 = mysql_fetch_array($getuser2);

545
545

546                                $template = new FITemplate('admin/viewComment');
546                                $template = new FITemplate('admin/viewComment');

547                                $template->add('ID', $_GET['id']);
547                                $template->add('ID', $_GET['id']);

548                                $template->add('USERNAME', $getcomment3['author']);
548                                $template->add('USERNAME', $getcomment3['author']);

549                                $template->add('CODEDEMAIL', md5(strtolower($getuser3['email'])));
549                                $template->add('CODEDEMAIL', md5(strtolower($getuser3['user_email'])));

550                                $template->add('TEXT', parseText($getcomment3['comment']));
550                                $template->add('TEXT', parseText($getcomment3['comment']));

551                                $template->add('DATE', date("F dS Y \a\\t g:i:s a",strtotime($getcomment3['pubDate'])));
551                                $template->add('DATE', date("F dS Y \a\\t g:i:s a",strtotime($getcomment3['pubDate'])));

552                        } else {
552                        } else {
@@ -601,7 +601,7 @@ if (isLoggedIn())

601                                $template = new FITemplate('admin/pollrss');
601                                $template = new FITemplate('admin/pollrss');

602                        } else if ($_GET['step'] == 2)
602                        } else if ($_GET['step'] == 2)

603                        {
603                        {

604                                $insrss = "INSERT INTO pollrss (author,rss) VALUES (\"" . sess_get('uname') . "\",\"" . mysql_real_escape_string($_POST['text']) . "\")";
604                                $insrss = "INSERT INTO pollrss (author,rss) VALUES (\"" . getSessionUsername() . "\",\"" . mysql_real_escape_string($_POST['text']) . "\")";

605                                $insrss2 = mysql_query($insrss);
605                                $insrss2 = mysql_query($insrss);

606
606

607                                $template = new FITemplate('admin/newPoll');
607                                $template = new FITemplate('admin/newPoll');
 

generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-11-22 10:19:10 +0000