12 files changed, 475 insertions, 7 deletions

@@ -0,0 +1,70 @@
+<?php
+
+/* InstaDisc Series - A Four Island Project */
+
+/** 
+ * require_once() is used to ensure
+ * the ACP files are being called by
+ * admin.php instead of their actual
+ * locations admin/.
+ * The _once() part ensures no problem
+ * arises as includes/instadisc.php has
+ * already been included from admin.php
+ */
+require_once('includes/instadisc.php');
+
+if (!isset($_SESSION['username']))
+{
+        header('Location: index.php');
+}
+
+if (!instaDisc_isAdmin($_SESSION['username']))
+{
+        $subs = instaDisc_listSubscriptions($_SESSION['username']);
+        $i=0;
+        $notfound=1;
+        for ($i=0;isset($subs[$i]);$i++)
+        {
+                if (!isset($_GET['submit']))
+                {
+                        if ($subs[$i]['identity'] == $_POST['id'])
+                        {
+                                $notfound=0;
+                        }
+                } else {
+                        if ($subs[$i]['id'] == $_GET['subid'])
+                        {
+                                $notfound=0;
+                        }
+                }
+        }
+
+        if ($notfound == 1)
+        {
+                header('Location: index.php');
+                exit;
+        }
+}
+
+if (!isset($_GET['submit']))
+{
+        $template = new FITemplate('deletesub');
+        $template->add('SITENAME',instaDisc_getConfig('siteName'));
+        $template->add('ID',$_GET['subid']);
+
+        $sub = instaDisc_getSubscription($_GET['subid']);
+        $template->add('IDENTITY',$sub['identity']);
+        $template->display();
+} else {
+        if ($_POST['submit'] == 'Yes')
+        {
+                instaDisc_deleteSubscription($_POST['id']);
+                
+                $template = new FITemplate('deletedsub');
+                $template->display();
+        } else {
+                header('Location: admin.php?id=main');
+        }
+}
+
+?>
@@ -0,0 +1,151 @@
+<?php
+
+/* InstaDisc Series - A Four Island Project */
+
+/** 
+ * require_once() is used to ensure
+ * the ACP files are being called by
+ * admin.php instead of their actual
+ * locations admin/.
+ * The _once() part ensures no problem
+ * arises as includes/instadisc.php has
+ * already been included from admin.php
+ */
+require_once('includes/instadisc.php');
+
+if (!isset($_SESSION['username']))
+{
+        header('Location: index.php');
+        exit;
+}
+
+if (!instaDisc_isAdmin($_SESSION['username']))
+{
+        $subs = instaDisc_listSubscriptions($_SESSION['username']);
+        $i=0;
+        $notfound=1;
+        for ($i=0;isset($subs[$i]);$i++)
+        {
+                if (!isset($_GET['submit']))
+                {
+                        if ($subs[$i]['identity'] == $_POST['id'])
+                        {
+                                $notfound=0;
+                        }
+                } else {
+                        if ($subs[$i]['id'] == $_GET['subid'])
+                        {
+                                $notfound=0;
+                        }
+                }
+        }
+
+        if ($notfound == 1)
+        {
+                header('Location: index.php');
+                exit;
+        }
+}
+
+if (!isset($_GET['submit']))
+{
+        $sub = instaDisc_getSubscription($_GET['subid']);
+        showForm($sub['identity'],$sub['title'],$sub['category'],$sub['url'],$sub['password'],array());
+} else {
+        $numOfErrors = 0;
+        $errors = array();
+
+        if ($_POST['title'] == '')
+        {
+                addError($numOfErrors, $errors, 'title', 'Title is a required field');
+        }
+
+        if ($_POST['url'] == '')
+        {
+                addError($numOfErrors, $errors, 'url', 'Subscription URL is a required field');
+        }
+
+        if ($_POST['category'] == '')
+        {
+                addError($numOfErrors, $errors, 'category', 'Category is a required field');
+        }
+
+        if ($numOfErrors > 0)
+        {
+                showForm($_POST['id'], $_POST['title'], $_POST['url'], $_POST['category'], $_POST['password'], $errors);
+        } else {
+                instaDisc_initSubscription($_SESSION['username'], $_POST['id'], $_POST['url'], $_POST['title'], $_POST['category'], $_POST['personal'], $_POST['password']);
+
+                $template = new FITemplate('editedsub');
+                $template->add('SITENAME', instaDisc_getConfig('siteName'));
+                $template->display();
+        }
+}
+
+function showForm($id, $title, $url, $category, $password, $errors)
+{
+        $template = new FITemplate('editsub');
+        $template->add('SITENAME', instaDisc_getConfig('siteName'));
+
+        if (isset($errors[1]))
+        {
+                $template->adds_block('ERROR', array('ex'=>'1'));
+
+                foreach ($errors as $name => $value)
+                {
+                        $template->adds_block('ERRORS', array(  'NAME' => $name,
+                                                                'MSG' => $value['msg']));
+                }
+        }
+
+        $template->add('TITLE_ERR', ifErrors($errors, 'title'));
+        $template->add('URL_ERR', ifErrors($errors, 'url'));
+        $template->add('CATEGORY_ERR', ifErrors($errors, 'url'));
+        $template->add('PASSWORD_ERR', ifErrors($errors, 'url'));
+
+        doErrors($template, $errors, 'title');
+        doErrors($template, $errors, 'url');
+        doErrors($template, $errors, 'category');
+        doErrors($template, $errors, 'password');
+
+        $template->add('ID', $id);
+        $template->add('TITLE', $title);
+        $template->add('URL', $url);
+        $template->add('CATEGORY', $category);
+        $template->add('PASSWORD', $password);
+
+        $template->display();
+}
+
+function ifErrors($errors, $id)
+{
+        foreach ($errors as $name => $value)
+        {
+                if ($value['field'] == $id)
+                {
+                        return ' error';
+                }
+        }
+
+        return '';
+}
+
+function doErrors($template, $errors, $id)
+{
+        foreach ($errors as $name => $value)
+        {
+                if ($value['field'] == $id)
+                {
+                        $template->adds_block(strtoupper($id) . '_ERRS', array( 'NAME' => $name,
+                                                                                'VALUE' => $value['msg']));
+                }
+        }
+}
+
+function addError(&$numOfErrors, &$errors, $field, $msg)
+{
+        $numOfErrors++;
+        $errors[$numOfErrors] = array('field' => $field, 'msg' => $msg);
+}
+
+?>
@@ -0,0 +1,39 @@
+<?php
+
+/* InstaDisc Series - A Four Island Project */
+
+/** 
+ * require_once() is used to ensure
+ * the ACP files are being called by
+ * admin.php instead of their actual
+ * locations admin/.
+ * The _once() part ensures no problem
+ * arises as includes/instadisc.php has
+ * already been included from admin.php
+ */
+require_once('includes/instadisc.php');
+
+if (!isset($_SESSION['username']))
+{
+        header('Location: index.php');
+}
+
+$template = new FITemplate('mansub');
+$template->add('SITENAME', instaDisc_getConfig('siteName'));
+
+if (instaDisc_isAdmin($_SESSION['username']))
+{
+        $subs = instaDisc_getAllSubscriptions();
+} else {
+        $subs = instaDisc_listSubscriptions($_SESSION['username']);
+}
+$i=0;
+for ($i=0;isset($subs[$i]);$i++)
+{
+        $template->adds_block('SUBSCRIPTION', array(    'IDENTITY' => $subs['identity'],
+                                                        'ID' => $subs['id']));
+}
+
+$template->display();
+
+?>
@@ -97,4 +97,17 @@ function initSubscription($username, $subscriptionID, $subscriptionURL, $subscri
         }
 }
 
+function instaDisc_listSubscriptions($username)
+{
+        $getsubs = "SELECT * FROM subscriptions WHERE username = \"" . mysql_real_escape_string($username) . "\"";
+        $getsubs2 = mysql_query($getsubs);
+        $i=0;
+        while ($getsubs3[$i] = mysql_fetch_array($getsubs2))
+        {
+                $i++;
+        }
+
+        return $getsubs3;
+}
+
 ?>
@@ -208,7 +208,6 @@ function showStepTwo($siteName, $adminUser, $adminPass, $errors)
 <DIV CLASS="ctrlHolder<?php ifErrors($errors, 'siteName'); ?>">
 <?php doErrors($errors, 'siteName'); ?> <LABEL FOR="siteName"><EM>*</EM> Site Name: </LABEL>
  <INPUT TYPE="text" ID="siteName" NAME="siteName" CLASS="textInput" VALUE="<?php echo($siteName); ?>">
- <P CLASS="formHint">Your website's name is required for a little personalization of emails.</P>
 </DIV>
 </FIELDSET><FIELDSET CLASS="inlineLabels"><LEGEND>Administrator User Details</LEGEND>
 <DIV CLASS="ctrlHolder<?php ifErrors($errors, 'adminUser'); ?>">
@@ -18,16 +18,19 @@ if (!instaDisc_subscriptionExists($_GET['id']))
 
 $sub = instaDisc_getSubscription($_GET['id']);
 
-echo('Subscription: ' . $sub['url'] . "\n");
-echo('Title: ' . $sub['title'] . "\n");
-echo('Category: ' . $sub['category'] . "\n");
+$template = new FITemplate('subscription');
+$template->add('SUBSCRIPTION', $sub['url']);
+$template->add('TITLE', $sub['title']);
+$template->add('CATEGORY', $sub['category']);
 
 if ($sub['password'] != '')
 {
-        echo("Password: On\n");
+        $template->add('PASSWORD', "Password: On\n");
 }
 
-echo('Series-Control-URL: http://' . $_SERVER['SERVER_NAME'] . str_replace(basename($_SERVER['PHP_SELF']), 'xmlrpc.php', $_SERVER['PHP_SELF']) . "\n");
-echo('Subscription-ID: ' . $_GET['id'] . "\n");
+$template->add('SERIESURL', 'http://' . $_SERVER['SERVER_NAME'] . str_replace(basename($_SERVER['PHP_SELF']), 'xmlrpc.php', $_SERVER['PHP_SELF']));
+$template->add('SUBID', $_GET['id']);
+
+$template->display();
 
 ?>
@@ -0,0 +1,15 @@
+<HTML>
+        <HEAD>
+                <TITLE><!--SITENAME--> InstaDisc Series Control</TITLE>
+        </HEAD>
+
+        <BODY>
+                <CENTER>
+                        <H1>InstaDisc Subscription Deletion</H1>
+
+                        <P>You have successfully deleted your subscription!
+
+                        <P><A HREF="admin.php?id=main">Back to User Panel</A>
+                </CENTER>
+        </BODY>
+</HTML>
@@ -0,0 +1,21 @@
+<HTML>
+        <HEAD>
+                <TITLE><!--SITENAME--> InstaDisc Series Control</TITLE>
+        </HEAD>
+
+        <BODY>
+                <CENTER>
+                        <H1>InstaDisc Subscription Deletion</H1>
+
+                        <P>Are you sure you would like to delete <!--IDENTITY-->?
+
+                        <FORM ACTION="./admin.php?id=deletesub&amp;submit=" METHOD="POST">
+                                <INPUT TYPE="hidden" NAME="id" VALUE="<!--ID-->">
+                                <INPUT TYPE="submit" NAME="submit" VALUE="Yes">
+                                <INPUT TYPE="submit" NAME="submit" VALUE="No">
+                        </FORM>
+                </CENTER>
+        </BODY>
+</HTML>
+
+
@@ -0,0 +1,13 @@
+<HTML>
+        <HEAD>
+                <TITLE><!--SITENAME--> InstaDisc Series Control</TITLE>
+        </HEAD>
+
+        <BODY>
+                <CENTER>
+                        <H1>InstaDisc Edit Subscription</H1>
+
+                        <P>You've successfully edited a subscription! <A HREF="admin.php">Back to the ACP</A>
+                </CENTER>
+        </BODY>
+</HTML>
@@ -0,0 +1,104 @@
+<HTML>
+        <HEAD>
+                <TITLE><!--SITENAME--> InstaDisc Series Control</TITLE>
+                <LINK REL="stylesheet" TYPE="text/css" HREF="theme/uniform.css">
+        </HEAD>
+
+        <BODY>
+                <CENTER>
+                        <H1>InstaDisc Edit Subscription</H1>
+
+                        <P>You can edit a subscription here.
+                </CENTER>
+
+                <FORM CLASS="uniform" ACTION="./admin.php?id=editsub&amp;submit=" METHOD="POST">
+
+                        <!--BEGIN ERROR-->
+                        <DIV ID="errorMsg">Uh oh! Validation errors!<P>
+                                <OL>
+                        <!--END ERROR-->
+
+                        <!--BEGIN ERRORS-->
+                                        <LI><A HREF="#error<!--ERRORS.NAME-->"><!--ERRORS.MSG--></A></LI>
+                        <!--END ERRORS-->
+
+                        <!--BEGIN ERROR-->
+                                </OL>
+                        </DIV>
+                        <!--END ERROR-->
+
+                        <FIELDSET CLASS="inlineLabels">
+                                <LEGEND>Series Control Info</LEGEND>
+
+                                <DIV CLASS="ctrlHolder<!--ID_ERR-->">
+                                        <!--BEGIN ID_ERRS-->
+                                                <P ID="error<!--ID_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+                                                        <!--ID_ERRS.MSG-->
+                                                </P>
+                                        <!--END ID_ERRS-->
+
+                                        <LABEL FOR="id"><EM>*</EM> Subscription ID: </LABEL>
+                                        <INPUT TYPE="text" ID="id" NAME="id" CLASS="textInput" VALUE="<!--ID-->" READONLY="READONLY">
+
+                                        <P CLASS="formHint">This is a short, unique string used to identify this subscription in Series Control.</P>
+                                </DIV>
+                        </FIELDSET>
+
+                        <FIELDSET CLASS="inlineLabels">
+                                <LEGEND>Subscription Info</LEGEND>
+
+                                <DIV CLASS="ctrlHolder<!--TITLE_ERR-->">
+                                        <!--BEGIN TITLE_ERRS-->
+                                                <P ID="error<!--TITLE_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+                                                        <!--TITLE_ERRS.MSG-->
+                                                </P>
+                                        <!--END TITLE_ERRS-->
+
+                                        <LABEL FOR="title"><EM>*</EM> Title: </LABEL>
+                                        <INPUT TYPE="text" ID="title" NAME="title" CLASS="textInput" VALUE="<!--TITLE-->">
+                                </DIV>
+
+                                <DIV CLASS="ctrlHolder<!--URL_ERR-->">
+                                        <!--BEGIN URL_ERRS-->
+                                                <P ID="error<!--URL_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+                                                        <!--URL_ERRS.MSG-->
+                                                </P>
+                                        <!--END URL_ERRS-->
+
+                                        <LABEL FOR="url"><EM>*</EM> Subscription URL: </LABEL>
+                                        <INPUT TYPE="text" ID="url" NAME="url" CLASS="textInput" VALUE="<!--URL-->">
+
+                                        <P CLASS="formHint">This is a unique URL used to identify this subscription on the Client.</P>          
+                                </DIV>
+
+                                <DIV CLASS="ctrlHolder<!--CATEGORY_ERR-->">
+                                        <!--BEGIN CATEGORY_ERRS-->
+                                                <P ID="error<!--CATEGORY_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+                                                        <!--CATEGORY_ERRS.MSG-->
+                                                </P>
+                                        <!--END CATEGORY_ERRS-->
+
+                                        <LABEL FOR="category"><EM>*</EM> Category: </LABEL>
+                                        <INPUT TYPE="text" ID="category" NAME="category" CLASS="textInput" VALUE="<!--CATEGORY-->">                     
+                                </DIV>
+
+                                <DIV CLASS="ctrlHolder<!--PASSWORD_ERR-->">
+                                        <!--BEGIN PASSWORD_ERRS-->
+                                                <P ID="error<!--PASSWORD_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+                                                        <!--PASSWORD_ERRS.MSG-->
+                                                </P>
+                                        <!--END PASSWORD_ERRS-->
+
+                                        <LABEL FOR="password">Password: </LABEL>
+                                        <INPUT TYPE="password" ID="password" NAME="password" CLASS="textInput" VALUE="<!--PASSWORD-->">
+
+                                        <P CLASS="formHint">If this subscription is encrypted, enter it's password here. Otherwise, leave it blank.</P>
+                                </DIV>
+                        </FIELDSET>
+
+                        <DIV CLASS="buttonHolder">
+                                <INPUT TYPE="submit" NAME="submit" VALUE="Submit">
+                        </DIV>
+                </FORM>
+        </BODY>
+</HTML>
@@ -0,0 +1,32 @@
+<HTML>
+        <HEAD>
+                <TITLE><!--SITENAME--> InstaDisc Series Control</TITLE>
+        </HEAD>
+
+        <BODY>
+                <CENTER>
+                        <H1>InstaDisc Subscription Management</H1>
+
+                        <P>You can manage your subscriptions here.
+
+                        <TABLE>
+                                <TR>
+                                        <TH>Subscription URL</TH>
+                                        <TH>Actions</TH>
+                                </TR>
+
+                                <!--BEGIN SUBSCRIPTIONS-->
+                                <TR>
+                                        <TD><!--SUBSCRIPTIONS.IDENTITY--></TD>
+                                        <TD>
+                                                <A HREF="admin.php?id=editsub&amp;subid=<!--SUBSCRIPTIONS.ID-->">Edit</A><BR>
+                                                <A HREF="admin.php?id=deletesub&amp;subid=<!--SUBSCRIPTIONS.ID-->">Delete</A>
+                                        </TD>
+                                </TR>
+                                <!--END SUBSCRIPTIONS-->
+                        </TABLE>
+
+                        <P><A HREF="admin.php?id=main">Back to User Panel</A>
+                </CENTER>
+        </BODY>
+</HTML>
@@ -0,0 +1,8 @@
+<DIV STYLE="display: none;">: 
+Subscription: <!--SUBSCRIPTION-->
+Title: <!--TITLE-->
+Category: <!--CATEGORY-->
+<!--PASSWORD-->Series-Control-URL: <!--SERIESURL-->
+Subscription-ID: <!--SUBID-->
+End: </DIV><DIV STYLE="margin: 0 auto; margin-top: 5em; width: 500px; background-color: #FBEC5D; text-align: center; padding: 4px;"><B>This is an InstaDisc Subscription file.</B><P>If you would like to subscribe to the InstaDisc subscription:<BR><I><!--TITLE--></I> (<U><!--CATEGORY--></U>)<BR>Copy the address of this file to the "Add Subscription" form on your InstaDisc client.</DIV>
+