From d0601a55010cd9fe2f2587ce157ce059e5da732e Mon Sep 17 00:00:00 2001
From: Star Rauchenberger <fefferburbia@gmail.com>
Date: Sat, 21 Feb 2009 18:05:42 -0500
Subject: Started admin panel

---
 admin/.htaccess  |  4 ++++
 admin/add.php    | 30 ++++++++++++++++++++++++++++++
 admin/index.php  | 27 +++++++++++++++++++++++++++
 admin/login.php  | 30 ++++++++++++++++++++++++++++++
 admin/logout.php |  7 +++++++
 admin/main.php   |  8 ++++++++
 admin/manage.php | 15 +++++++++++++++
 admin/remove.php |  8 ++++++++
 admin/update.php |  5 +++++
 9 files changed, 134 insertions(+)
 create mode 100755 admin/.htaccess
 create mode 100644 admin/add.php
 create mode 100755 admin/index.php
 create mode 100644 admin/login.php
 create mode 100644 admin/logout.php
 create mode 100644 admin/main.php
 create mode 100644 admin/manage.php
 create mode 100644 admin/remove.php
 create mode 100644 admin/update.php

(limited to 'admin')

diff --git a/admin/.htaccess b/admin/.htaccess
new file mode 100755
index 0000000..d590e40
--- /dev/null
+++ b/admin/.htaccess
@@ -0,0 +1,4 @@
+RewriteEngine On
+RewriteCond %{REQUEST_FILENAME} !index.php
+RewriteCond %{REQUEST_FILENAME} !-d
+RewriteRule (.*).php /admin/index.php?file=$1 [QSA,L]
diff --git a/admin/add.php b/admin/add.php
new file mode 100644
index 0000000..96a9219
--- /dev/null
+++ b/admin/add.php
@@ -0,0 +1,30 @@
+<?php
+
+$getimage = "SELECT * FROM moderation WHERE id = " . $_GET['id'];
+$getimage2 = mysql_query($getimage);
+$getimage3 = mysql_fetch_array($getimage2);
+
+$title = $getimage3['title'];
+$title = preg_replace('/[^A-Za-z0-9 ]/','',$title);
+$title = str_replace(' ', '-', $title);
+$title = preg_replace('/-{2,}/','-',$title);
+if (substr($title,0,1) == '-')
+{
+	$title = substr($title,1);
+}
+if (substr($title,strlen($title)-1,1) == '-')
+{
+	$title = substr($title,0,strlen($title)-1);
+}
+$title = strtolower($title);
+rename($_SERVER['DOCUMENT_ROOT'] . '/moderation/' . $getimage3['id'] . '.png', $_SERVER['DOCUMENT_ROOT'] . '/images/' . $title . '.png');
+
+$insimage = "INSERT INTO pending (title,filename,text,author) VALUES (\"" . $getimage3['title'] . "\",\"" . $title . "\",\"" . $getimage3['text'] . "\",\"" . $getimage3['author'] . "\")";
+$insimage2 = mysql_query($insimage);
+
+$delimage = "DELETE FROM moderation WHERE id = " . $_GET['id'];
+$delimage2 = mysql_query($delimage);
+
+?>
+
+Added comic <?php echo($getimage3['title']); ?>!
diff --git a/admin/index.php b/admin/index.php
new file mode 100755
index 0000000..3a5f6be
--- /dev/null
+++ b/admin/index.php
@@ -0,0 +1,27 @@
+<?php
+
+session_start();
+
+ob_start();
+
+include('../header.php');
+
+if (!isset($_SESSION['username']))
+{
+	include('login.php');
+} else {
+	if (!isset($_GET['file']))
+	{
+		$file = 'main.php';
+	} else {
+		$file = basename($_GET['file'] . '.php');
+	}
+
+	include($file);
+}
+
+include('../footer.php');
+
+ob_end_flush();
+
+?>
diff --git a/admin/login.php b/admin/login.php
new file mode 100644
index 0000000..f938664
--- /dev/null
+++ b/admin/login.php
@@ -0,0 +1,30 @@
+<?php
+
+if (!isset($_GET['submit']))
+{
+
+?>
+<FORM ACTION="/admin/login.php?submit=" METHOD="POST">
+Username: <INPUT TYPE="text" NAME="user"><BR>
+Password: <INPUT TYPE="password" NAME="pass"><BR>
+<INPUT TYPE="submit"></FORM>
+<?php
+
+} else {
+	$getconfig = "SELECT * FROM config WHERE name = \"username\" OR name = \"password\" ORDER BY name DESC";
+	$getconfig2 = mysql_query($getconfig) or die($getconfig);
+	$username = mysql_fetch_array($getconfig2);
+	$password = mysql_fetch_array($getconfig2);
+
+	if (($username['value'] == $_POST['user']) && ($password['value'] == md5($_POST['pass'])))
+	{
+		$_SESSION['username'] = $_POST['user'];
+
+		header('Location: /admin/');
+		exit;
+	} else {
+?><H2>Incorrect login</H2><?php
+	}
+}
+
+?>
diff --git a/admin/logout.php b/admin/logout.php
new file mode 100644
index 0000000..639e045
--- /dev/null
+++ b/admin/logout.php
@@ -0,0 +1,7 @@
+<?php
+
+unset($_SESSION['username']);
+
+header('Location: /');
+
+?>
diff --git a/admin/main.php b/admin/main.php
new file mode 100644
index 0000000..aa01262
--- /dev/null
+++ b/admin/main.php
@@ -0,0 +1,8 @@
+<H2>Admin Panel</H2>
+
+<UL>
+	<LI><A HREF="/admin/post.php">Upload a comic</A></LI>
+	<LI><A HREF="/admin/manage.php">Manage moderation queue</A></LI>
+	<LI><A HREF="/admin/update.php">HG Update</A></LI>
+	<LI><A HREF="/admin/logout.php">Logout</A></LI>
+</UL>
diff --git a/admin/manage.php b/admin/manage.php
new file mode 100644
index 0000000..2485520
--- /dev/null
+++ b/admin/manage.php
@@ -0,0 +1,15 @@
+<UL><?php
+
+$getimages = "SELECT * FROM moderation";
+$getimages2 = mysql_query($getimages);
+while ($getimages3 = mysql_fetch_array($getimages2))
+{
+?><LI><?php echo($getimages3['title']); ?> -
+<IMG SRC="/moderation/<?php echo($getimages3['id']); ?>.png" ALT="<?php echo($getimages3['text']); ?>" TITLE="<?php echo($getimages3['text']); ?>"> - 
+<A HREF="/admin/add.php?id=<?php echo($getimages3['id']); ?>">Add to Pending Queue</A> -
+<A HREF="/admin/remove.php?id=<?php echo($getimages3['id']); ?>">Remove</A></LI><?php
+}
+
+?></UL>
+
+<A HREF="/admin/">Back to Admin</A>
diff --git a/admin/remove.php b/admin/remove.php
new file mode 100644
index 0000000..bf8e565
--- /dev/null
+++ b/admin/remove.php
@@ -0,0 +1,8 @@
+<?php
+
+$delimage = "DELETE FROM moderation WHERE id = " . $_GET['id'];
+$delimage2 = mysql_query($delimage);
+
+?>
+
+Removed comic <?php echo($_GET['id']); ?>!
diff --git a/admin/update.php b/admin/update.php
new file mode 100644
index 0000000..c84c2c4
--- /dev/null
+++ b/admin/update.php
@@ -0,0 +1,5 @@
+<?php
+
+system('hg update');
+
+?>
-- 
cgit 1.4.1