220 lines
8.1 KiB
PHP
Executable file
220 lines
8.1 KiB
PHP
Executable file
<?php session_start();
|
|
|
|
include "core.php";
|
|
include "config.php";
|
|
|
|
$Action = "";
|
|
$Authorized = 0;
|
|
$Primary = 0;
|
|
$postID = -1;
|
|
$Error = "";
|
|
|
|
if (!isset($_SESSION['username']) || !isset($_SESSION['password']) || !isset($_SESSION['type'])) {
|
|
header('Location: login.php?redir=edit');
|
|
die();
|
|
} else if ($_SESSION['type'] != 2) { // not allowed
|
|
header('Location: /');
|
|
die();
|
|
}
|
|
|
|
if (!isset($_REQUEST['action'])) {
|
|
$Action = "write";
|
|
} else {
|
|
$Action = htmlspecialchars($_REQUEST['action']);
|
|
}
|
|
|
|
if (!isset($_REQUEST['id'])) {
|
|
$postID = -1;
|
|
} else {
|
|
$postID = htmlspecialchars($_REQUEST['id']);
|
|
}
|
|
|
|
if (!isset($_REQUEST['e'])) {
|
|
$Error = "";
|
|
} else {
|
|
$Error = htmlspecialchars($_REQUEST['e']);
|
|
}
|
|
|
|
$Database = createTables($sqlDB);
|
|
$DatabaseQuery = $Database->query('SELECT * FROM users');
|
|
|
|
while ($line = $DatabaseQuery->fetchArray()) {
|
|
if ($line['username'] == $_SESSION['username'] && $_SESSION['username'] != "" && $line['password'] == $_SESSION['password'] && $_SESSION['password'] != "" && $line['usertype'] == 2) {
|
|
$Authorized = 1;
|
|
$Primary = $line['primaryadmin'];
|
|
break;
|
|
}
|
|
}
|
|
|
|
// not authorized
|
|
if ($Authorized != 1) {
|
|
header('Location: /');
|
|
die();
|
|
}
|
|
|
|
$html = "";
|
|
$html = printHeader($html, 0);
|
|
|
|
$html .= "\t\t\t<h1>Page manager</h1>\n";
|
|
$html .= "\t\t\t\t<div class=\"pageLinks\">\n";
|
|
$html .= "\t\t\t\t\t<span id=\"pageSpan\" class=\"title\">\n";
|
|
|
|
if ($Action == "write") {
|
|
$html .= "\t\t\t\t\t\t<a href=\"/edit.php?action=write\" id='sel'>Write</a>\n";
|
|
} else {
|
|
$html .= "\t\t\t\t\t\t<a href=\"/edit.php?action=write\">Write</a>\n";
|
|
}
|
|
|
|
if ($Action == "attachments") {
|
|
$html .= "\t\t\t\t\t\t<a href=\"/edit.php?action=attachments\" id='sel'>Attachments</a>\n";
|
|
} else {
|
|
$html .= "\t\t\t\t\t\t<a href=\"/edit.php?action=attachments\">Attachments</a>\n";
|
|
}
|
|
|
|
if ($Action == "articles") {
|
|
$html .= "\t\t\t\t\t\t<a href=\"/edit.php?action=articles\" id='sel'>Articles</a>\n";
|
|
} else {
|
|
$html .= "\t\t\t\t\t\t<a href=\"/edit.php?action=articles\">Articles</a>\n";
|
|
}
|
|
|
|
$html .= "\t\t\t\t\t</span>\n";
|
|
$html .= "\t\t\t\t</div>\n";
|
|
|
|
if ($Action == "write") {
|
|
$defaultText = "@csgen.title = \"Unicorns & Lollipops\";\n@csgen.description = \"My description\";\n@csgen.date = \"1970-01-01\";\n@csgen.allowComments = \"true\";\n\nHello world!";
|
|
$defaultEndpoint = "";
|
|
|
|
$DatabaseQuery = $Database->query('SELECT * FROM pages');
|
|
while ($line = $DatabaseQuery->fetchArray()) {
|
|
if ($line['id'] == $postID && $postID != -1) {
|
|
$theFile = $line['file'];
|
|
|
|
if (file_exists($theFile)) {
|
|
$defaultText = file_get_contents($theFile);
|
|
}
|
|
|
|
$defaultEndpoint = $line['endpoint'];
|
|
break;
|
|
}
|
|
}
|
|
|
|
$html .= "\t\t\t\t<p class=\"pageWarning\"><strong>Warning: Switching tab will delete changes made to the Markdown document. Press 'Save' to avoid this.</strong></p>\n";
|
|
|
|
if ($postID == -1) {
|
|
$html .= "\t\t\t\t<form class=\"pageWriteForm\" action=\"/create.php?redir=edit\" method=\"post\">\n";
|
|
} else {
|
|
$html .= "\t\t\t\t<form class=\"pageWriteForm\" action=\"/update.php?redir=edit&id=$postID\" method=\"post\">\n";
|
|
}
|
|
|
|
$html .= "\t\t\t\t\t<label for=\"pageWriteArea\">Body</label><br>\n";
|
|
$html .= "\t\t\t\t\t<br><textarea id=\"pageWriteArea\" class=\"pageWriteArea\" name=\"body\" rows=\"32\" cols=\"98\">$defaultText</textarea>\n";
|
|
$html .= "\t\t\t\t\t<br>\n";
|
|
$html .= "\t\t\t\t\t<br><label for=\"endpoint\">Public location</label>\n";
|
|
|
|
if ($defaultEndpoint != "") {
|
|
$html .= "\t\t\t\t\t<input type=\"text\" name=\"endpoint\" value=\"$defaultEndpoint\" placeholder=\"/blog/unicorns-and-lollipops\"><br>\n";
|
|
} else {
|
|
$html .= "\t\t\t\t\t<input type=\"text\" name=\"endpoint\" placeholder=\"/blog/unicorns-and-lollipops\"><br>\n";
|
|
}
|
|
|
|
$html .= "\t\t\t\t\t<br><input type=\"submit\" value=\"Save\"><br><br>\n";
|
|
$html .= "\t\t\t\t</form>\n";
|
|
|
|
// handle errors
|
|
if ($Error == "endpoint") {
|
|
$html .= "\t\t\t\t<p class=\"pageError\">You must specify a valid endpoint (e.g. /blog/article1)</p>\n";
|
|
} else if ($Error == "file") {
|
|
$html .= "\t\t\t\t<p class=\"pageError\">Failed to upload file.</p>\n";
|
|
} else if ($Error == "exists") {
|
|
$html .= "\t\t\t\t<p class=\"pageError\">A file with this endpoint already exists.</p>\n";
|
|
}
|
|
} else if ($Action == "attachments") {
|
|
$html .= "\t\t\t\t<form class=\"pageFileUploadForm\" action=\"/upload.php?redir=edit\" method=\"post\" enctype=\"multipart/form-data\">\n";
|
|
$html .= "\t\t\t\t\t<br><input type=\"file\" name=\"file\" id=\"file\">\n";
|
|
$html .= "\t\t\t\t\t<input type=\"submit\" value=\"Upload selected file\" id=\"upload\" name=\"upload\">\n";
|
|
$html .= "\t\t\t\t</form>\n";
|
|
|
|
$attachments = array();
|
|
|
|
if (is_dir($attachmentLocation)) {
|
|
$attachments = scandir($attachmentLocation);
|
|
}
|
|
|
|
$html .= "\t\t\t\t<table class=\"pageAttachmentView\">\n";
|
|
$html .= "\t\t\t\t\t<tr class=\"pageAttachmentView\">\n";
|
|
$html .= "\t\t\t\t\t\t<th class=\"pageAttachmentLocation\"></th>\n";
|
|
$html .= "\t\t\t\t\t</tr>\n";
|
|
|
|
|
|
$html .= "\t\t\t\t\t<tr class=\"pageAttachmentLocation\">\n";
|
|
|
|
foreach ($attachments as $index => $file) {
|
|
if ($file == "." || $file == "..") {
|
|
continue;
|
|
}
|
|
|
|
$html .= "\t\t\t\t\t<tr class=\"pageAttachmentLocation\">\n";
|
|
$html .= "\t\t\t\t\t\t<td class=\"pageAttachmentLocation\"><a href=\"/$attachmentLocation/$file\">$file</a></td>\n";
|
|
$html .= "\t\t\t\t\t\t<td class=\"pageRemove\"><a href=\"/remove-file.php?redir=edit&file=$index\">Remove</a></td>\n";
|
|
$html .= "\t\t\t\t\t</tr>\n";
|
|
}
|
|
|
|
$html .= "\t\t\t\t</table>\n";
|
|
|
|
// handle errors
|
|
if ($Error == "endpoint") {
|
|
$html .= "\t\t\t\t<p class=\"pageError\">You must specify a valid endpoint (e.g. /blog/article1)</p>\n";
|
|
} else if ($Error == "file") {
|
|
$html .= "\t\t\t\t<p class=\"pageError\">Failed to upload file.</p>\n";
|
|
} else if ($Error == "exists") {
|
|
$html .= "\t\t\t\t<p class=\"pageError\">A file with this endpoint already exists.</p>\n";
|
|
}
|
|
} else if ($Action == "articles") {
|
|
$html .= "\t\t\t\t<table class=\"pageUserView\">\n";
|
|
$html .= "\t\t\t\t\t<tr class=\"pageArticleView\">\n";
|
|
$html .= "\t\t\t\t\t\t<th class=\"pageID\">ID</th>\n";
|
|
$html .= "\t\t\t\t\t\t<th class=\"pageUser\">User</th>\n";
|
|
$html .= "\t\t\t\t\t\t<th class=\"pageDate\">Date</th>\n";
|
|
$html .= "\t\t\t\t\t\t<th class=\"pageEndpoint\">Location</th>\n";
|
|
$html .= "\t\t\t\t\t\t<th class=\"pageFile\">File</th>\n";
|
|
$html .= "\t\t\t\t\t</tr>\n";
|
|
|
|
$DatabaseQuery = $Database->query('SELECT * FROM pages');
|
|
while ($line = $DatabaseQuery->fetchArray()) {
|
|
$ID = $line['id'];
|
|
$Username = $line['username'];
|
|
$Date = $line['date'];
|
|
$Endpoint = $line['endpoint'];
|
|
$File = $line['file'];
|
|
$baseFile = basename($File);
|
|
|
|
$html .= "\t\t\t\t\t<tr class=\"pageArticleView\">\n";
|
|
$html .= "\t\t\t\t\t\t<td class=\"pageID\" id=\"id-1-$Username\">$ID</td>\n";
|
|
$html .= "\t\t\t\t\t\t<td class=\"pageUser\">$Username</td>\n";
|
|
$html .= "\t\t\t\t\t\t<td class=\"pageDate\">$Date</td>\n";
|
|
$html .= "\t\t\t\t\t\t<td class=\"pageEndpoint\"><a href=\"../$Endpoint\">$Endpoint</a></td>\n";
|
|
$html .= "\t\t\t\t\t\t<td class=\"pageFile\"><a href=\"$File\">$baseFile</a></td>\n";
|
|
$html .= "\t\t\t\t\t\t<td class=\"pageEdit\"><a href=\"/edit.php?id=$ID\">Edit</a></td>\n";
|
|
$html .= "\t\t\t\t\t\t<td class=\"pageRemove\"><a href=\"/remove.php?redir=edit&id=$ID\">Remove</a></td>\n";
|
|
|
|
$html .= "\t\t\t\t\t</tr>\n";
|
|
}
|
|
|
|
$html .= "\t\t\t\t</table>\n";
|
|
|
|
// handle errors
|
|
if ($Error == "endpoint") {
|
|
$html .= "\t\t\t\t<p class=\"pageError\">You must specify a valid endpoint (e.g. /blog/article1)</p>\n";
|
|
} else if ($Error == "file") {
|
|
$html .= "\t\t\t\t<p class=\"pageError\">Failed to upload file.</p>\n";
|
|
} else if ($Error == "exists") {
|
|
$html .= "\t\t\t\t<p class=\"pageError\">A file with this endpoint already exists.</p>\n";
|
|
}
|
|
}
|
|
|
|
$html = printFooter($html);
|
|
|
|
print "$html";
|
|
|
|
?>
|