7 files changed, 234 insertions, 0 deletions

@@ -0,0 +1,21 @@
+<?php
+
+/* InstaDisc Series - A Four Island Project */
+
+session_start();
+
+include('includes/instadisc.php');
+
+if (!isset($_GET['id']) || !isset($_SESSION['username']))
+{
+        if (!isset($_SESSION['username']))
+        {
+                include('admin/login.php');
+        } else {
+                include('admin/main.php');
+        }
+} else {
+        include('admin/' . basename($_GET['id']) . '.php');
+}
+
+?>
@@ -0,0 +1,95 @@
+<?php
+
+/* InstaDisc Series - A Four Island Project */
+
+/** 
+ * require_once() is used to ensure
+ * the ACP files are being called by
+ * admin.php instead of their actual
+ * locations admin/.
+ * The _once() part ensures no problem
+ * arises as includes/instadisc.php has
+ * already been included from admin.php
+ */
+require_once('includes/instadisc.php');
+
+if (!isset($_GET['submit']))
+{
+        showForm('','',array());
+} else {
+        $numOfErrors = 0;
+        $errors = array();
+
+        if (instaDisc_verifyUser($_POST['username'], $_POST['password']))
+        {
+                $_SESSION['username'] = $_POST['username'];
+
+                $template = new FITemplate('loggedin');
+                $template->add('SITENAME', instaDisc_getConfig('siteName'));
+                $template->display();
+        } else {
+                addError($numOfErrors, $errors, '', 'Account could not be found');
+                showForm($_POST['username'], $_POST['password'], $errors);
+        }
+}
+
+function showForm($username, $password, $errors)
+{
+        $template = new FITemplate('login');
+        $template->add('SITENAME', instaDisc_getConfig('siteName'));
+
+        if (isset($errors[1]))
+        {
+                $template->adds_block('ERROR', array('ex'=>'1'));
+
+                foreach ($errors as $name => $value)
+                {
+                        $template->adds_block('ERRORS', array(  'NAME' => $name,
+                                                                'MSG' => $value['msg']));
+                }
+        }
+
+        $template->add('USERNAME_ERR', ifErrors($errors, 'username'));
+        $template->add('PASSWORD_ERR', ifErrors($errors, 'password'));
+
+        doErrors($template, $errors, 'username');
+        doErrors($template, $errors, 'password');
+
+        $template->add('USERNAME', $username);
+        $template->add('PASSWORD', $password);
+
+        $template->display();
+}
+
+function ifErrors($errors, $id)
+{
+        foreach ($errors as $name => $value)
+        {
+                if ($value['field'] == $id)
+                {
+                        return ' error';
+                }
+        }
+
+        return '';
+}
+
+function doErrors($template, $errors, $id)
+{
+        foreach ($errors as $name => $value)
+        {
+                if ($value['field'] == $id)
+                {
+                        $template->adds_block(strtoupper($id) . '_ERRS', array( 'NAME' => $name,
+                                                                                'VALUE' => $value['msg']));
+                }
+        }
+}
+
+function addError(&$numOfErrors, &$errors, $field, $msg)
+{
+        $numOfErrors++;
+        $errors[$numOfErrors] = array('field' => $field, 'msg' => $msg);
+}
+
+?>
@@ -0,0 +1,25 @@
+<?php
+
+/* InstaDisc Series - A Four Island Project */
+
+/** 
+ * require_once() is used to ensure
+ * the ACP files are being called by
+ * admin.php instead of their actual
+ * locations admin/.
+ * The _once() part ensures no problem
+ * arises as includes/instadisc.php has
+ * already been included from admin.php
+ */
+require_once('includes/instadisc.php');
+
+if (!isset($_SESSION['username']))
+{
+        header('Location: index.php');
+}
+
+$template = new FITemplate('main');
+$template->add('SITENAME',instaDisc_getConfig('siteName'));
+$template->display();
+
+?>
@@ -51,4 +51,9 @@ function instaDisc_getConfig($name)
         return $getconfig3['value'];
 }
 
+function instaDisc_verifyUser($username, $password)
+{
+        return (($username == instaDisc_getConfig('adminUser')) && (md5($password) == instaDisc_getConfig('adminPass')));
+}
+
 ?>
@@ -0,0 +1,14 @@
+<HTML>
+        <HEAD>
+                <TITLE><!--SITENAME--> InstaDisc Series Control</TITLE>
+        </HEAD>
+
+        <BODY>
+                <CENTER>
+                        <H1>InstaDisc Sign-in</H1>
+
+                        <P>Thank you for logging in. <A HREF="admin.php">You may now procede to the ACP</A>
+                </CENTER>
+        </BODY>
+</HTML>
+
@@ -0,0 +1,61 @@
+<HTML>
+        <HEAD>
+                <TITLE><!--SITENAME--> InstaDisc Series Control</TITLE>
+                <LINK REL="stylesheet" TYPE="text/css" HREF="theme/uniform.css">
+        </HEAD>
+
+        <BODY>
+                <CENTER>
+                        <H1>InstaDisc Sign-in</H1>
+
+                        <P>If you are the administrator of this Series Control, feel free to login here.
+                </CENTER>
+
+                <FORM CLASS="uniform" ACTION="./admin.php?id=login&amp;submit=" METHOD="POST">
+
+                        <!--BEGIN ERROR-->
+                        <DIV ID="errorMsg">Uh oh! Validation errors!<P>
+                                <OL>
+                        <!--END ERROR-->
+
+                        <!--BEGIN ERRORS-->
+                                        <LI><A HREF="#error<!--ERRORS.NAME-->"><!--ERRORS.MSG--></A></LI>
+                        <!--END ERRORS-->
+
+                        <!--BEGIN ERROR-->
+                                </OL>
+                        </DIV>
+                        <!--END ERROR-->
+
+                        <FIELDSET CLASS="inlineLabels">
+                                <LEGEND>User Details</LEGEND>
+
+                                <DIV CLASS="ctrlHolder<!--USERNAME_ERR-->">
+                                        <!--BEGIN USERNAME_ERRS-->
+                                                <P ID="error<!--USERNAME_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+                                                        <!--USERNAME_ERRS.MSG-->
+                                                </P>
+                                        <!--END USERNAME_ERRS-->
+
+                                        <LABEL FOR="username"><EM>*</EM> Username: </LABEL>
+                                        <INPUT TYPE="text" ID="username" NAME="username" CLASS="textInput" VALUE="<!--USERNAME-->">                     
+                                </DIV>
+
+                                <DIV CLASS="ctrlHolder<!--PASSWORD_ERR-->">
+                                        <!--BEGIN PASSWORD_ERRS-->
+                                                <P ID="error<!--PASSWORD_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+                                                        <!--PASSWORD_ERRS.MSG-->
+                                                </P>
+                                        <!--END PASSWORD_ERRS-->
+
+                                        <LABEL FOR="password"><EM>*</EM> Password: </LABEL>
+                                        <INPUT TYPE="password" ID="password" NAME="password" CLASS="textInput" VALUE="<!--PASSWORD-->">
+                                </DIV>
+                        </FIELDSET>
+
+                        <DIV CLASS="buttonHolder">
+                                <INPUT TYPE="submit" NAME="submit" VALUE="Submit">
+                        </DIV>
+                </FORM>
+        </BODY>
+</HTML>
@@ -0,0 +1,13 @@
+<CENTER>
+<H1><!--SITENAME--></H2><P>
+<H2>Series Control ACP</H2><P>
+
+Here are some actions you can preform:
+
+<UL>
+        <LI><A HREF="admin.php?id=chpwd">Change your Password</A></LI>
+        <LI><A HREF="admin.php?id=addsub">Add a new Subscription</A></LI>
+        <LI><A HREF="admin.php?id=mansub">Manage subscriptions</A></LI>
+        <LI><A HREF="admin.php?id=logout">Log out</A></LI>
+</UL>
+</CENTER>