Started admin panel

12 files changed, 146 insertions, 2 deletions

@@ -0,0 +1,4 @@
+RewriteEngine On
+RewriteCond %{REQUEST_FILENAME} !index.php
+RewriteCond %{REQUEST_FILENAME} !-d
+RewriteRule (.*).php /admin/index.php?file=$1 [QSA,L]
@@ -0,0 +1,30 @@
+<?php
+
+$getimage = "SELECT * FROM moderation WHERE id = " . $_GET['id'];
+$getimage2 = mysql_query($getimage);
+$getimage3 = mysql_fetch_array($getimage2);
+
+$title = $getimage3['title'];
+$title = preg_replace('/[^A-Za-z0-9 ]/','',$title);
+$title = str_replace(' ', '-', $title);
+$title = preg_replace('/-{2,}/','-',$title);
+if (substr($title,0,1) == '-')
+{
+        $title = substr($title,1);
+}
+if (substr($title,strlen($title)-1,1) == '-')
+{
+        $title = substr($title,0,strlen($title)-1);
+}
+$title = strtolower($title);
+rename($_SERVER['DOCUMENT_ROOT'] . '/moderation/' . $getimage3['id'] . '.png', $_SERVER['DOCUMENT_ROOT'] . '/images/' . $title . '.png');
+
+$insimage = "INSERT INTO pending (title,filename,text,author) VALUES (\"" . $getimage3['title'] . "\",\"" . $title . "\",\"" . $getimage3['text'] . "\",\"" . $getimage3['author'] . "\")";
+$insimage2 = mysql_query($insimage);
+
+$delimage = "DELETE FROM moderation WHERE id = " . $_GET['id'];
+$delimage2 = mysql_query($delimage);
+
+?>
+
+Added comic <?php echo($getimage3['title']); ?>!
@@ -0,0 +1,27 @@
+<?php
+
+session_start();
+
+ob_start();
+
+include('../header.php');
+
+if (!isset($_SESSION['username']))
+{
+        include('login.php');
+} else {
+        if (!isset($_GET['file']))
+        {
+                $file = 'main.php';
+        } else {
+                $file = basename($_GET['file'] . '.php');
+        }
+
+        include($file);
+}
+
+include('../footer.php');
+
+ob_end_flush();
+
+?>
@@ -0,0 +1,30 @@
+<?php
+
+if (!isset($_GET['submit']))
+{
+
+?>
+<FORM ACTION="/admin/login.php?submit=" METHOD="POST">
+Username: <INPUT TYPE="text" NAME="user"><BR>
+Password: <INPUT TYPE="password" NAME="pass"><BR>
+<INPUT TYPE="submit"></FORM>
+<?php
+
+} else {
+        $getconfig = "SELECT * FROM config WHERE name = \"username\" OR name = \"password\" ORDER BY name DESC";
+        $getconfig2 = mysql_query($getconfig) or die($getconfig);
+        $username = mysql_fetch_array($getconfig2);
+        $password = mysql_fetch_array($getconfig2);
+
+        if (($username['value'] == $_POST['user']) && ($password['value'] == md5($_POST['pass'])))
+        {
+                $_SESSION['username'] = $_POST['user'];
+
+                header('Location: /admin/');
+                exit;
+        } else {
+?><H2>Incorrect login</H2><?php
+        }
+}
+
+?>
@@ -0,0 +1,7 @@
+<?php
+
+unset($_SESSION['username']);
+
+header('Location: /');
+
+?>
@@ -0,0 +1,8 @@
+<H2>Admin Panel</H2>
+
+<UL>
+        <LI><A HREF="/admin/post.php">Upload a comic</A></LI>
+        <LI><A HREF="/admin/manage.php">Manage moderation queue</A></LI>
+        <LI><A HREF="/admin/update.php">HG Update</A></LI>
+        <LI><A HREF="/admin/logout.php">Logout</A></LI>
+</UL>
@@ -0,0 +1,15 @@
+<UL><?php
+
+$getimages = "SELECT * FROM moderation";
+$getimages2 = mysql_query($getimages);
+while ($getimages3 = mysql_fetch_array($getimages2))
+{
+?><LI><?php echo($getimages3['title']); ?> -
+<IMG SRC="/moderation/<?php echo($getimages3['id']); ?>.png" ALT="<?php echo($getimages3['text']); ?>" TITLE="<?php echo($getimages3['text']); ?>"> - 
+<A HREF="/admin/add.php?id=<?php echo($getimages3['id']); ?>">Add to Pending Queue</A> -
+<A HREF="/admin/remove.php?id=<?php echo($getimages3['id']); ?>">Remove</A></LI><?php
+}
+
+?></UL>
+
+<A HREF="/admin/">Back to Admin</A>
@@ -0,0 +1,8 @@
+<?php
+
+$delimage = "DELETE FROM moderation WHERE id = " . $_GET['id'];
+$delimage2 = mysql_query($delimage);
+
+?>
+
+Removed comic <?php echo($_GET['id']); ?>!
@@ -0,0 +1,5 @@
+<?php
+
+system('hg update');
+
+?>
@@ -1,6 +1,6 @@
 <?php
 
-include('../security/pillowcase.php');
+include($_SERVER['DOCUMENT_ROOT'] . '/../security/pillowcase.php');
 
 mysql_connect($dbhost, $dbuser, $dbpasswd);
 mysql_select_db($dbname);
@@ -21,7 +21,7 @@ if (isset($title))
 
 <?php
 
-include_once('db.php');
+include_once($_SERVER['DOCUMENT_ROOT'] . '/db.php');
 
 $getlast = "SELECT * FROM config WHERE name = \"lastUpdated\"";
 $getlast2 = mysql_query($getlast);
@@ -24,6 +24,16 @@ $getimage3 = mysql_fetch_array($getimage2);
 
                                 <DIV CLASS="title">
                                         <H2><?php echo($getimage3['title']); ?></H2>
+<?php
+
+if ($getimage3['author'] != '')
+{
+?>
+                                        <CENTER><SMALL>Guest comic by <?php echo($getimage3['author']); ?></SMALL></CENTER>
+<?php
+}
+
+?>
                                 </DIV>
                         </DIV>