779 lines
30 KiB
PHP
779 lines
30 KiB
PHP
<?
|
|
|
|
// TEMPORARY SOLUTION:
|
|
if (!$user->id || $user->id > 4) exit();
|
|
|
|
/*
|
|
* Account administration:
|
|
*/
|
|
function account_display($order = "username") {
|
|
$sort = array("ID" => "id", "fake e-mail address" => "fake_email", "homepage" => "url", "hostname" => "last_host", "last access date" => "last_access", "real e-mail address" => "real_email", "real name" => "name", "status" => "status", "theme" => "theme", "timezone" => "timezone", "username" => "userid");
|
|
$show = array("ID" => "id", "username" => "userid", "$order" => "$sort[$order]", "status" => "status");
|
|
$stat = array(0 => "blocked", 1 => "not confirmed", 2 => "open");
|
|
|
|
### Perform query:
|
|
$result = db_query("SELECT u.id, u.userid, u.$sort[$order], u.status FROM users u ORDER BY $sort[$order]");
|
|
|
|
### Generate output:
|
|
$output .= "<TABLE BORDER=\"1\" CELLPADDING=\"3\" CELLSPACING=\"0\">\n";
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH ALIGN=\"right\" COLSPAN=\"". (sizeof($show) + 1) ."\">\n";
|
|
$output .= " <FORM ACTION=\"admin.php?section=accounts\" METHOD=\"post\">\n";
|
|
$output .= " <SELECT NAME=\"order\">\n";
|
|
foreach ($sort as $key=>$value) {
|
|
$output .= " <OPTION VALUE=\"$key\"". ($key == $order ? " SELECTED" : "") .">Sort by $key</OPTION>\n";
|
|
}
|
|
$output .= " </SELECT>\n";
|
|
$output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Update\">\n";
|
|
$output .= " </FORM>\n";
|
|
$output .= " </TH>\n";
|
|
$output .= " </TR>\n";
|
|
$output .= " <TR>\n";
|
|
foreach ($show as $key=>$value) {
|
|
$output .= " <TH>$key</TH>\n";
|
|
}
|
|
$output .= " <TH>operations</TH>\n";
|
|
$output .= " </TR>\n";
|
|
|
|
while ($account = db_fetch_array($result)) {
|
|
$output .= " <TR>\n";
|
|
foreach ($show as $key=>$value) {
|
|
switch($value) {
|
|
case "real_email":
|
|
$output .= " <TD>". format_email($account[$value]) ."</TD>\n";
|
|
break;
|
|
case "last_access":
|
|
$output .= " <TD>". format_date($account[$value]) ."</TD>\n";
|
|
break;
|
|
case "status":
|
|
$output .= " <TD ALIGN=\"center\">". $stat[$account[$value]] ."</TD>\n";
|
|
break;
|
|
case "timezone":
|
|
$output .= " <TD ALIGN=\"center\">". format_data($account[$value] / 3600) ."</TD>\n";
|
|
break;
|
|
case "url":
|
|
$output .= " <TD>". format_url($account[$value]) ."</TD>\n";
|
|
break;
|
|
case "userid":
|
|
$output .= " <TD>". format_username($account[$value], 1) ."</TD>\n";
|
|
break;
|
|
default:
|
|
$output .= " <TD>". format_data($account[$value]) ."</TD>\n";
|
|
}
|
|
}
|
|
$output .= " <TD ALIGN=\"center\"><A HREF=\"admin.php?section=accounts&op=view&name=$account[userid]\">view</A></TD>\n";
|
|
$output .= " </TR>\n";
|
|
}
|
|
$output .= "</TABLE>\n";
|
|
|
|
print $output;
|
|
}
|
|
|
|
function account_stories($id) {
|
|
$result = db_query("SELECT * FROM stories WHERE author = $id ORDER BY timestamp DESC");
|
|
while ($story = db_fetch_object($result)) {
|
|
$output .= "<LI><A HREF=\"discussion.php?id=$story->id\">". check_output($story->subject) ."</A></LI>\n";
|
|
}
|
|
return $output;
|
|
}
|
|
|
|
function account_comments($id) {
|
|
$result = db_query("SELECT * FROM comments WHERE author = $id ORDER BY timestamp DESC");
|
|
while ($comment = db_fetch_object($result)) {
|
|
$output .= "<LI><A HREF=\"discussion.php?id=$comment->sid&cid=$comment->cid&pid=$comment->pid#$comment->cid\">". check_output($comment->subject) ."</A></LI>\n";
|
|
}
|
|
return $output;
|
|
}
|
|
|
|
function account_view($name) {
|
|
$status = array(0 => "blocked", 1 => "not confirmed", 2 => "open");
|
|
|
|
$result = db_query("SELECT * FROM users WHERE userid = '$name'");
|
|
|
|
if ($account = db_fetch_object($result)) {
|
|
$output .= "<TABLE BORDER=\"1\" CELLPADDING=\"3\" CELLSPACING=\"0\">\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>ID:</B></TD><TD>$account->id</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Status:</B></TD><TD>". $status[$account->status] ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Username:</B></TD><TD>$account->userid</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Real name:</B></TD><TD>". format_data($account->name) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Real e-mail address:</B></TD><TD>". format_email($account->real_email) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Fake e-mail address:</B></TD><TD>". format_data($account->fake_email) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>URL of homepage:</B></TD><TD>". format_url($account->url) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Last access:</B></TD><TD>". format_date($account->last_access) ." from $account->last_host</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Bio information:</B></TD><TD>". format_data($account->bio) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Signature:</B></TD><TD>". format_data($account->signature) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Theme:</B></TD><TD>". format_data($account->theme) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Timezone:</B></TD><TD>". format_data($account->timezone / 3600) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\"><B>Submitted stories:</B></TD><TD>". format_data(account_stories($account->id)) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\"><B>Submitted comments:</B></TD><TD>". format_data(account_comments($account->id)) ."</TD></TR>\n";
|
|
$output .= "</TABLE>\n";
|
|
print "$output";
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Watchdog administration:
|
|
*/
|
|
function watchdog_display($order = "date") {
|
|
$colors = array("#D8BFD8", "#6495ED", "#6A5ADF", "#FFFFFF", "#FFA500", "#FF3C3C");
|
|
$fields = array("date" => "id DESC", "username" => "user", "location" => "location", "message" => "message DESC", "level" => "level DESC");
|
|
|
|
### Perform query:
|
|
$result = db_query("SELECT l.*, u.userid FROM watchdog l LEFT JOIN users u ON l.user = u.id ORDER BY l.$fields[$order]");
|
|
|
|
### Generate output:
|
|
$output .= "<TABLE BORDER=\"1\" CELLPADDING=\"3\" CELLSPACING=\"0\">\n";
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH ALIGN=\"right\" COLSPAN=\"4\">\n";
|
|
$output .= " <FORM ACTION=\"admin.php?section=watchdog\" METHOD=\"post\">\n";
|
|
$output .= " <SELECT NAME=\"order\">\n";
|
|
foreach ($fields as $key=>$value) {
|
|
$output .= " <OPTION VALUE=\"$key\"". ($key == $order ? " SELECTED" : "") .">Sort by $key</OPTION>\n";
|
|
}
|
|
$output .= " </SELECT>\n";
|
|
$output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Update\">\n";
|
|
$output .= " </FORM>\n";
|
|
$output .= " </TH>\n";
|
|
$output .= " </TR>\n";
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH>date</TH>\n";
|
|
$output .= " <TH>message</TH>\n";
|
|
$output .= " <TH>user</TH>\n";
|
|
$output .= " <TH>operations</TH>\n";
|
|
$output .= " </TR>\n";
|
|
|
|
while ($watchdog = db_fetch_object($result)) {
|
|
$output .= " <TR BGCOLOR=\"". $colors[$watchdog->level] ."\"><TD>". format_date($watchdog->timestamp) ."</TD><TD>". substr(check_output($watchdog->message), 0, 44) ."</TD><TD ALIGN=\"center\">". format_username($watchdog->userid, 1) ."</A></TD><TD ALIGN=\"center\"><A HREF=\"admin.php?section=watchdog&op=view&id=$watchdog->id\">more</A></TD></TR>\n";
|
|
}
|
|
|
|
$output .= "</TABLE>\n";
|
|
|
|
print $output;
|
|
}
|
|
|
|
function watchdog_view($id) {
|
|
$result = db_query("SELECT l.*, u.userid FROM watchdog l LEFT JOIN users u ON l.user = u.id WHERE l.id = $id");
|
|
|
|
if ($watchdog = db_fetch_object($result)) {
|
|
$output .= "<TABLE BORDER=\"1\" CELLPADDING=\"3\" CELLSPACING=\"0\">\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Level:</B></TD><TD>$watchdog->level</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Date:</B></TD><TD>". format_date($watchdog->timestamp, "extra large") ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>User:</B></TD><TD>". format_username($watchdog->userid, 1) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Location:</B></TD><TD>$watchdog->location</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Message:</B></TD><TD>$watchdog->message</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\"><B>Hostname:</B></TD><TD>$watchdog->hostname</TD></TR>\n";
|
|
$output .= "</TABLE>\n";
|
|
print $output;
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Cron administration:
|
|
*/
|
|
function cron_display() {
|
|
### Perform query:
|
|
$result = db_query("SELECT * FROM cron");
|
|
|
|
### Generate output:
|
|
while ($cron = db_fetch_object($result)) {
|
|
$output .= "<TABLE BORDER=\"1\" CELLPADDING=\"3\" CELLSPACING=\"0\">\n";
|
|
$output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\">Name:</TD><TD>". check_output($cron->name) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\">Help:</TD><TD>". check_output($cron->help) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\">Code:</TD><TD><CODE>". nl2br($cron->code) ."</CODE></TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\">Last run:</TD><TD>". format_date($cron->timestamp) ."</TD></TR>\n";
|
|
$output .= " <TD><TD ALIGN=\"right\" VALIGN=\"top\">Scheduled:</TD><TD>every $cron->scheduled seconds</TD></TR>\n";
|
|
$output .= "</TABLE>\n";
|
|
$output .= "<BR><BR>\n";
|
|
}
|
|
|
|
print $output;
|
|
}
|
|
|
|
/*
|
|
* Ban administration:
|
|
*/
|
|
|
|
function ban_check($mask, $category) {
|
|
$ban = ban_match($mask, $category);
|
|
$output .= "". ($ban ? "Matched ban '<B>$ban->mask</B>' with reason: <I>$ban->reason</I>.<P>\n" : "No matching bans for '$mask'.<P>\n") ."";
|
|
print $output;
|
|
}
|
|
|
|
function ban_new($mask, $category, $reason) {
|
|
ban_add($mask, $category, $reason, &$message);
|
|
$output .= "$message\n";
|
|
print $output;
|
|
}
|
|
|
|
function ban_display($category = "") {
|
|
global $type2index;
|
|
|
|
### initialize variable:
|
|
$category = $category ? $category : 1;
|
|
|
|
### Perform query:
|
|
$result = db_query("SELECT * FROM bans WHERE type = $category ORDER BY mask");
|
|
|
|
### Generate output:
|
|
$output .= "<TABLE BORDER=\"1\" CELLPADDING=\"3\" CELLSPACING=\"0\">\n";
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH COLSPAN=\"3\">\n";
|
|
$output .= " <FORM ACTION=\"admin.php?section=bans\" METHOD=\"post\">\n";
|
|
$output .= " <SELECT NAME=\"category\">\n";
|
|
for (reset($type2index); $cur = current($type2index); next($type2index)) {
|
|
$output .= " <OPTION VALUE=\"$cur\"". ($cur == $category ? " SELECTED" : "") .">Sort by ". key($type2index) ."</OPTION>\n";
|
|
}
|
|
$output .= " </SELECT>\n";
|
|
$output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Update\">\n";
|
|
$output .= " </FORM>\n";
|
|
$output .= " </TH>\n";
|
|
$output .= " </TR>\n";
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH>mask</TH>\n";
|
|
$output .= " <TH>reason</TH>\n";
|
|
$output .= " <TH>operations</TH>\n";
|
|
$output .= " </TR>\n";
|
|
|
|
while ($ban = db_fetch_object($result)) {
|
|
$output .= " <TR><TD>$ban->mask</TD><TD>$ban->reason</TD><TD ALIGN=\"center\"><A HREF=\"admin.php?section=bans&op=delete&category=$category&id=$ban->id\">delete</A></TD></TR>\n";
|
|
}
|
|
|
|
$output .= " <TR><TD COLSPAN=\"3\"><SMALL>%: matches any number of characters, even zero characters.<BR>_: matches exactly one character.</SMALL></TD></TR>\n";
|
|
$output .= "</TABLE>\n";
|
|
$output .= "<BR><HR>\n";
|
|
|
|
$output .= "<H3>Add new ban:</H3>\n";
|
|
$output .= "<FORM ACTION=\"admin.php?section=bans\" METHOD=\"post\">\n";
|
|
$output .= "<B>Banmask:</B><BR>\n";
|
|
$output .= "<INPUT TYPE=\"text\" NAME=\"mask\" SIZE=\"35\"><P>\n";
|
|
$output .= "<B>Type:</B><BR>\n";
|
|
$output .= "<SELECT NAME=\"category\"\">\n";
|
|
for (reset($type2index); $cur = current($type2index); next($type2index)) {
|
|
$output .= "<OPTION VALUE=\"$cur\"". ($cur == $category ? " SELECTED" : "") .">". key($type2index) ."</OPTION>\n";
|
|
}
|
|
$output .= "</SELECT><P>\n";
|
|
$output .= "<B>Reason:</B><BR>\n";
|
|
$output .= "<TEXTAREA NAME=\"reason\" COLS=\"50\" ROWS=\"5\"></TEXTAREA><P>\n";
|
|
$output .= "<INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Add ban\"><BR>\n";
|
|
$output .= "</FORM>\n";
|
|
$output .= "<BR><HR>\n";
|
|
|
|
$output .= "<H3>Ban check:</H3>\n";
|
|
$output .= "<FORM ACTION=\"admin.php?section=bans\" METHOD=\"post\">\n";
|
|
$output .= "<B>Banmask:</B><BR>\n";
|
|
$output .= "<INPUT TYPE=\"text\" NAME=\"mask\" SIZE=\"35\"><P>\n";
|
|
$output .= "<B>Type:</B><BR>\n";
|
|
$output .= "<SELECT NAME=\"category\"\">\n";
|
|
for (reset($type2index); $cur = current($type2index); next($type2index)) {
|
|
$output .= "<OPTION VALUE=\"$cur\"". ($cur == $category ? " SELECTED" : "") .">". key($type2index) ."</OPTION>\n";
|
|
}
|
|
$output .= "</SELECT><P>\n";
|
|
$output .= "<INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Check ban\"><BR>\n";
|
|
$output .= "</FORM>\n";
|
|
|
|
print $output;
|
|
}
|
|
|
|
/*
|
|
* Comments administration:
|
|
*/
|
|
|
|
function comment_edit($id) {
|
|
$result = db_query("SELECT c.*, u.userid FROM comments c LEFT JOIN users u ON c.author = u.id WHERE c.cid = $id");
|
|
|
|
$comment = db_fetch_object($result);
|
|
|
|
$output .= "<FORM ACTION=\"admin.php?section=comments&op=save&id=$id\" METHOD=\"post\">\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= " <B>Author:</B><BR>\n";
|
|
$output .= " ". format_username($comment->userid, 1) ."\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= " <B>Subject:</B><BR>\n";
|
|
$output .= " <INPUT TYPE=\"text\" NAME=\"subject\" SIZE=\"50\" VALUE=\"". check_output(check_field($comment->subject)) ."\"><BR>\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= "<B>Comment:</B><BR>\n";
|
|
$output .= " <TEXTAREA WRAP=\"virtual\" COLS=\"50\" ROWS=\"10\" NAME=\"comment\">". check_output($comment->comment) ."</TEXTAREA><BR>\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Save comment\">\n";
|
|
$output .= "</P>\n";
|
|
$output .= "</FORM>\n";
|
|
|
|
print $output;
|
|
}
|
|
|
|
function comment_save($id, $subject, $comment) {
|
|
db_query("UPDATE comments SET subject = '". check_input($subject) ."', comment = '". check_input($comment) ."' WHERE cid = $id");
|
|
watchdog("message", "modified comment `$subject'.");
|
|
}
|
|
|
|
function comment_display($order = "date") {
|
|
### Initialize variables:
|
|
$fields = array("author" => "author", "date" => "timestamp DESC", "subject" => "subject");
|
|
|
|
### Perform SQL query:
|
|
$result = db_query("SELECT c.*, u.userid FROM comments c LEFT JOIN users u ON u.id = c.author ORDER BY c.$fields[$order] LIMIT 50");
|
|
|
|
### Display comments:
|
|
$output .= "<TABLE BORDER=\"1\" CELLPADDING=\"3\" CELLSPACING=\"0\">\n";
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH ALIGN=\"right\" COLSPAN=\"5\">\n";
|
|
$output .= " <FORM ACTION=\"admin.php?section=comments\" METHOD=\"post\">\n";
|
|
$output .= " <SELECT NAME=\"order\">\n";
|
|
foreach ($fields as $key=>$value) {
|
|
$output .= " <OPTION VALUE=\"$key\"". ($key == $order ? " SELECTED" : "") .">Sort by $key</OPTION>\n";
|
|
}
|
|
$output .= " </SELECT>\n";
|
|
$output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Update\">\n";
|
|
$output .= " </FORM>\n";
|
|
$output .= " </TH>\n";
|
|
$output .= " </TR>\n";
|
|
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH>subject</TH>\n";
|
|
$output .= " <TH>author</TH>\n";
|
|
$output .= " <TH>operations</TH>\n";
|
|
$output .= " </TR>\n";
|
|
|
|
while ($comment = db_fetch_object($result)) {
|
|
$output .= " <TR><TD><A HREF=\"discussion.php?id=$comment->sid&cid=$comment->cid&pid=$comment->pid#$comment->cid\">". check_output($comment->subject) ."</A></TD><TD>". format_username($comment->userid, 1) ."</TD><TD ALIGN=\"center\"><A HREF=\"admin.php?section=comments&op=edit&id=$comment->cid\">edit</A></TD></TR>\n";
|
|
}
|
|
|
|
$output .= "</TABLE>\n";
|
|
|
|
print $output;
|
|
}
|
|
|
|
/*
|
|
* Statistics administration:
|
|
*/
|
|
function stats_display() {
|
|
#
|
|
# Story statistics:
|
|
#
|
|
$result = db_query("SELECT s.subject, c.sid, COUNT(c.sid) AS count, u.userid FROM comments c, stories s LEFT JOIN users u ON s.author = u.id WHERE s.id = c.sid GROUP BY c.sid ORDER BY count DESC LIMIT 20;");
|
|
while ($stat = db_fetch_object($result)) $output1 .= "<I><A HREF=\"discussion.php?id=$stat->sid\">$stat->subject</A></I> by ". format_username($stat->userid, 1) .": ". format_plural($stat->count, "comment", "comments") ."<BR>\n";
|
|
admin_box("Story statistics", $output1);
|
|
|
|
#
|
|
# Poster statistics:
|
|
#
|
|
$result = db_query("SELECT u.userid, COUNT(s.author) AS count FROM stories s LEFT JOIN users u ON s.author = u.id GROUP BY s.author ORDER BY count DESC LIMIT 20");
|
|
while ($stat = db_fetch_object($result)) $output2 .= "". format_username($stat->userid) .": ". format_plural($stat->count, "story", "stories") ."<BR>\n";
|
|
admin_box("Poster statistics", $output2);
|
|
|
|
#
|
|
# Category statistics:
|
|
#
|
|
$result = db_query("SELECT category, COUNT(category) AS count FROM stories GROUP by category ORDER BY count DESC");
|
|
while ($stat = db_fetch_object($result)) $output3 .= "$stat->category: ". format_plural($stat->count, "story", "stories") ."<BR>\n";
|
|
admin_box("Category statistics", $output3);
|
|
|
|
#
|
|
# Theme statistics:
|
|
#
|
|
$result = db_query("SELECT theme, COUNT(id) AS count FROM users GROUP BY theme ORDER BY count DESC");
|
|
while ($stat = db_fetch_object($result)) $output4 .= "<I>$stat->theme</I>-theme: ". format_plural($stat->count, "user", "users") ."<BR>\n";
|
|
admin_box("Theme statistics", $output4);
|
|
}
|
|
|
|
/*
|
|
* Diary administration:
|
|
*/
|
|
function diary_edit($id) {
|
|
$result = db_query("SELECT d.*, u.userid FROM diaries d LEFT JOIN users u ON d.author = u.id WHERE d.id = $id");
|
|
|
|
$diary = db_fetch_object($result);
|
|
|
|
$output .= "<FORM ACTION=\"admin.php?section=diaries&op=save&id=$id\" METHOD=\"post\">\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= " <B>Author:</B><BR>\n";
|
|
$output .= " ". format_username($diary->userid, 1) ."\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= "<B>Diary entry:</B><BR>\n";
|
|
$output .= " <TEXTAREA WRAP=\"virtual\" COLS=\"50\" ROWS=\"10\" NAME=\"text\">". check_output($diary->text) ."</TEXTAREA><BR>\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Save diary entry\">\n";
|
|
$output .= "</P>\n";
|
|
$output .= "</FORM>\n";
|
|
|
|
print $output;
|
|
}
|
|
|
|
function diary_save($id, $text) {
|
|
db_query("UPDATE diaries SET text = '". check_input($text) ."' WHERE id = $id");
|
|
watchdog("message", "modified diary entry #$id.");
|
|
}
|
|
|
|
function diary_display($order = "date") {
|
|
### Initialize variables:
|
|
$fields = array("author" => "author", "date" => "timestamp DESC");
|
|
|
|
### Perform SQL query:
|
|
$result = db_query("SELECT d.*, u.userid FROM diaries d LEFT JOIN users u ON u.id = d.author ORDER BY d.$fields[$order] LIMIT 50");
|
|
|
|
### Display stories:
|
|
$output .= "<TABLE BORDER=\"1\" CELLPADDING=\"3\" CELLSPACING=\"0\">\n";
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH ALIGN=\"right\" COLSPAN=\"5\">\n";
|
|
$output .= " <FORM ACTION=\"admin.php?section=diaries\" METHOD=\"post\">\n";
|
|
$output .= " <SELECT NAME=\"order\">\n";
|
|
foreach ($fields as $key=>$value) {
|
|
$output .= " <OPTION VALUE=\"$key\"". ($key == $order ? " SELECTED" : "") .">Sort by $key</OPTION>\n";
|
|
}
|
|
$output .= " </SELECT>\n";
|
|
$output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Update\">\n";
|
|
$output .= " </FORM>\n";
|
|
$output .= " </TH>\n";
|
|
$output .= " </TR>\n";
|
|
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH>subject</TH>\n";
|
|
$output .= " <TH>author</TH>\n";
|
|
$output .= " <TH>operations</TH>\n";
|
|
$output .= " </TR>\n";
|
|
|
|
while ($diary = db_fetch_object($result)) {
|
|
$output .= " <TR><TD><A HREF=\"diary.php?op=view&name=$diary->userid\">$diary->userid on ". format_date($diary->date, "small") ."</A></TD><TD>". format_username($diary->userid, 1) ."</TD><TD ALIGN=\"center\"><A HREF=\"admin.php?section=diaries&op=edit&id=$diary->id\">edit</A></TD></TR>\n";
|
|
}
|
|
|
|
$output .= "</TABLE>\n";
|
|
|
|
print $output;
|
|
}
|
|
|
|
/*
|
|
* Home administration:
|
|
*/
|
|
function home_display() {
|
|
print "<BR><BR><BIG><CENTER><A HREF=\"\">home</A></CENTER></BIG>\n";
|
|
}
|
|
|
|
/*
|
|
* Blob administration:
|
|
*/
|
|
|
|
function blob_display() {
|
|
$result = db_query("SELECT * FROM blobs");
|
|
|
|
### Generate output:
|
|
while ($block = db_fetch_object($result)) {
|
|
$output .= "<TABLE BORDER=\"1\" CELLPADDING=\"3\" CELLSPACING=\"0\">\n";
|
|
$output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\">Name:</TD><TD>". check_output($block->name) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\">Help:</TD><TD>". check_output($block->help) ."</TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\">Code:</TD><TD><CODE>". nl2br(htmlentities($block->code)) ."</CODE></TD></TR>\n";
|
|
$output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\">Operations:</TD><TD><A HREF=\"admin.php?section=blobs&op=edit&id=$block->id\">edit</A>, <A HREF=\"admin.php?section=blobs&op=delete&id=$block->id\">delete</A></TD></TR>\n";
|
|
$output .= "</TABLE>\n";
|
|
$output .= "<BR><BR>\n";
|
|
}
|
|
|
|
$output .= "<H3>Add new block:</H3>\n";
|
|
$output .= "<FORM ACTION=\"admin.php?section=blobs\" METHOD=\"post\">\n";
|
|
$output .= "<B>Name:</B><BR>\n";
|
|
$output .= "<INPUT TYPE=\"text\" NAME=\"name\" SIZE=\"35\"><P>\n";
|
|
$output .= "<B>Help:</B><BR>\n";
|
|
$output .= "<TEXTAREA NAME=\"help\" COLS=\"50\" ROWS=\"5\"></TEXTAREA><P>\n";
|
|
$output .= "<B>Code:</B><BR>\n";
|
|
$output .= "<TEXTAREA NAME=\"code\" COLS=\"50\" ROWS=\"5\"></TEXTAREA><P>\n";
|
|
$output .= "<INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Add block\"><BR>\n";
|
|
$output .= "</FORM>\n";
|
|
$output .= "<BR><HR>\n";
|
|
|
|
print $output;
|
|
}
|
|
|
|
function blob_edit($id) {
|
|
$result = db_query("SELECT * FROM blobs WHERE id = $id");
|
|
|
|
if ($block = db_fetch_object($result)) {
|
|
$output .= "<FORM ACTION=\"admin.php?section=blobs\" METHOD=\"post\">\n";
|
|
$output .= "<B>Name:</B><BR>\n";
|
|
$output .= "<INPUT TYPE=\"text\" NAME=\"name\" VALUE=\"". check_field($block->name) ."\" SIZE=\"35\"><P>\n";
|
|
$output .= "<B>Help:</B><BR>\n";
|
|
$output .= "<TEXTAREA NAME=\"help\" COLS=\"50\" ROWS=\"5\">$block->help</TEXTAREA><P>\n";
|
|
$output .= "<B>Code:</B><BR>\n";
|
|
$output .= "<TEXTAREA NAME=\"code\" COLS=\"50\" ROWS=\"5\">$block->code</TEXTAREA><P>\n";
|
|
$output .= "<INPUT TYPE=\"hidden\" NAME=\"id\" VALUE=\"$id\">\n";
|
|
$output .= "<INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Save block\"><BR>\n";
|
|
$output .= "</FORM>\n";
|
|
$output .= "<BR><HR>\n";
|
|
}
|
|
|
|
print $output;
|
|
}
|
|
|
|
function blob_save($id, $name, $help, $code) {
|
|
db_query("UPDATE blobs SET name = '". check_input($name) ."', help = '". check_input($help) ."', code = '". check_code($code) ."' WHERE id = $id");
|
|
watchdog("message", "modified block `$name'.");
|
|
}
|
|
|
|
/*
|
|
* Story administration:
|
|
*/
|
|
function story_edit($id) {
|
|
global $categories;
|
|
|
|
$result = db_query("SELECT s.*, u.userid FROM stories s LEFT JOIN users u ON s.author = u.id WHERE s.id = $id");
|
|
$story = db_fetch_object($result);
|
|
|
|
$output .= "<FORM ACTION=\"admin.php?section=stories&op=save&id=$id\" METHOD=\"post\">\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= " <B>Author:</B><BR>\n";
|
|
$output .= " ". format_username($story->userid) ."\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= " <B>Subject:</B><BR>\n";
|
|
$output .= " <INPUT TYPE=\"text\" NAME=\"subject\" SIZE=\"50\" VALUE=\"". check_output(check_field($story->subject)) ."\"><BR>\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P><B>Category:</B><BR>\n";
|
|
$output .= " <SELECT NAME=\"category\">\n";
|
|
for ($i = 0; $i < sizeof($categories); $i++) {
|
|
$output .= " <OPTION VALUE=\"$categories[$i]\" ";
|
|
if ($story->category == $categories[$i]) $output .= "SELECTED";
|
|
$output .= ">$categories[$i]</OPTION>\n";
|
|
}
|
|
$output .= "</SELECT>\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= "<B>Abstract:</B><BR>\n";
|
|
$output .= " <TEXTAREA WRAP=\"virtual\" COLS=\"50\" ROWS=\"10\" NAME=\"abstract\">". check_output($story->abstract) ."</TEXTAREA><BR>\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= "<B>Editor's note/updates:</B><BR>\n";
|
|
$output .= " <TEXTAREA WRAP=\"virtual\" COLS=\"50\" ROWS=\"10\" NAME=\"updates\">". check_output($story->updates) ."</TEXTAREA><BR>\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= " <B>Extended story:</B><BR>\n";
|
|
$output .= " <TEXTAREA WRAP=\"virtual\" COLS=\"50\" ROWS=\"15\" NAME=\"article\">". check_output($story->article) ."</TEXTAREA><BR>\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P><B>Status:</B><BR>\n";
|
|
$output .= " <SELECT NAME=\"status\">\n";
|
|
$output .= ($story->status == 0) ? " <OPTION VALUE=\"0\" SELECTED>Deleted story</OPTION>\n" : " <OPTION VALUE=\"0\">Deleted story </OPTION>\n";
|
|
$output .= ($story->status == 1) ? " <OPTION VALUE=\"1\" SELECTED>Pending story</OPTION>\n" : " <OPTION VALUE=\"1\">Pending story</OPTION>\n";
|
|
$output .= ($story->status == 2) ? " <OPTION VALUE=\"2\" SELECTED>Public story</OPTION>\n" : " <OPTION VALUE=\"2\">Public story</OPTION>\n";
|
|
$output .= "</SELECT>\n";
|
|
$output .= "</P>\n";
|
|
|
|
$output .= "<P>\n";
|
|
$output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Save story\">\n";
|
|
$output .= "</P>\n";
|
|
$output .= "</FORM>\n";
|
|
|
|
print $output;
|
|
}
|
|
|
|
function story_save($id, $subject, $abstract, $updates, $article, $category, $status) {
|
|
db_query("UPDATE stories SET subject = '". check_input($subject) ."', abstract = '". check_input($abstract) ."', updates = '". check_input($updates) ."', article = '". check_input($article) ."', category = '". check_input($category) ."', status = '$status' WHERE id = $id");
|
|
watchdog("message", "modified story `$subject'.");
|
|
}
|
|
|
|
function story_display($order = "date") {
|
|
### Initialize variables:
|
|
$status = array("deleted", "pending", "public");
|
|
$fields = array("author" => "author", "category" => "category", "date" => "timestamp DESC", "status" => "status DESC");
|
|
|
|
### Perform SQL query:
|
|
$result = db_query("SELECT s.*, u.userid FROM stories s LEFT JOIN users u ON u.id = s.author ORDER BY s.$fields[$order]");
|
|
|
|
### Display stories:
|
|
$output .= "<TABLE BORDER=\"1\" CELLPADDING=\"3\" CELLSPACING=\"0\">\n";
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH ALIGN=\"right\" COLSPAN=\"5\">\n";
|
|
$output .= " <FORM ACTION=\"admin.php?section=stories\" METHOD=\"post\">\n";
|
|
$output .= " <SELECT NAME=\"order\">\n";
|
|
foreach ($fields as $key=>$value) {
|
|
$output .= " <OPTION VALUE=\"$key\"". ($key == $order ? " SELECTED" : "") .">Sort by $key</OPTION>\n";
|
|
}
|
|
$output .= " </SELECT>\n";
|
|
$output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Update\">\n";
|
|
$output .= " </FORM>\n";
|
|
$output .= " </TH>\n";
|
|
$output .= " </TR>\n";
|
|
|
|
$output .= " <TR>\n";
|
|
$output .= " <TH>subject</TH>\n";
|
|
$output .= " <TH>author</TH>\n";
|
|
$output .= " <TH>category</TH>\n";
|
|
$output .= " <TH>status</TH>\n";
|
|
$output .= " <TH>operations</TH>\n";
|
|
$output .= " </TR>\n";
|
|
|
|
while ($story = db_fetch_object($result)) {
|
|
$output .= " <TR><TD><A HREF=\"discussion.php?id=$story->id\">". check_output($story->subject) ."</A></TD><TD>". format_username($story->userid, 1) ."</TD><TD>$story->category</TD><TD ALIGN=\"center\">". $status[$story->status] ."</TD><TD ALIGN=\"center\"><A HREF=\"admin.php?section=stories&op=edit&id=$story->id\">edit</A></TD></TR>\n";
|
|
}
|
|
|
|
$output .= "</TABLE>\n";
|
|
|
|
print $output;
|
|
}
|
|
|
|
function info_display() {
|
|
include "includes/config.inc";
|
|
|
|
$output .= "sitename: $site_name<BR>\n";
|
|
$output .= "e-mail address: $contact_email<BR>\n";
|
|
$output .= "send e-mail notifications: $notify<BR>\n";
|
|
$output .= "allowed HTML tags: <I>". htmlspecialchars($allowed_html) ."</I><BR>\n";
|
|
$output .= "anonymous user: $anonymous<BR>\n";
|
|
$output .= "submission post threshold: $submission_post_threshold<BR>\n";
|
|
$output .= "submission dump threshold: $submission_dump_threshold<BR>\n";
|
|
|
|
admin_box("$site_name settings", $output);
|
|
}
|
|
|
|
include "includes/config.inc";
|
|
include "includes/function.inc";
|
|
include "includes/database.inc";
|
|
include "includes/watchdog.inc";
|
|
include "includes/admin.inc";
|
|
|
|
admin_header();
|
|
|
|
switch ($section) {
|
|
case "stories":
|
|
switch ($op) {
|
|
case "edit":
|
|
story_edit($id);
|
|
break;
|
|
case "Save story":
|
|
story_save($id, $subject, $abstract, $updates, $article, $category, $status);
|
|
story_edit($id);
|
|
break;
|
|
case "Update":
|
|
story_display($order);
|
|
break;
|
|
default:
|
|
story_display();
|
|
}
|
|
break;
|
|
case "comments":
|
|
switch ($op) {
|
|
case "edit":
|
|
comment_edit($id);
|
|
break;
|
|
case "Save comment":
|
|
comment_save($id, $subject, $comment);
|
|
comment_edit($id);
|
|
break;
|
|
case "Update":
|
|
comment_display($order);
|
|
break;
|
|
default:
|
|
comment_display();
|
|
}
|
|
break;
|
|
case "diaries":
|
|
switch ($op) {
|
|
case "edit":
|
|
diary_edit($id);
|
|
break;
|
|
case "Save diary entry":
|
|
diary_save($id, $text);
|
|
diary_edit($id);
|
|
break;
|
|
case "Update":
|
|
diary_display($order);
|
|
break;
|
|
default:
|
|
diary_display();
|
|
}
|
|
break;
|
|
case "accounts":
|
|
switch ($op) {
|
|
case "view":
|
|
account_view($name);
|
|
break;
|
|
case "Update":
|
|
account_display($order);
|
|
break;
|
|
default:
|
|
account_display();
|
|
}
|
|
break;
|
|
case "blobs":
|
|
include "includes/blob.inc";
|
|
switch ($op) {
|
|
case "Add block":
|
|
blob_add($name, $help, $code);
|
|
blob_display();
|
|
break;
|
|
case "Save block":
|
|
blob_save($id, $name, $help, $code);
|
|
blob_display();
|
|
break;
|
|
case "edit":
|
|
blob_edit($id);
|
|
break;
|
|
case "delete":
|
|
blob_delete($id);
|
|
default:
|
|
blob_display();
|
|
}
|
|
break;
|
|
case "bans":
|
|
include "includes/ban.inc";
|
|
switch ($op) {
|
|
case "Add ban":
|
|
ban_new($mask, $category, $reason);
|
|
ban_display($category);
|
|
break;
|
|
case "Check ban":
|
|
ban_check($mask, $category);
|
|
ban_display($category);
|
|
break;
|
|
case "delete":
|
|
ban_delete($id);
|
|
default:
|
|
ban_display($category);
|
|
}
|
|
break;
|
|
case "watchdog":
|
|
switch ($op) {
|
|
case "view":
|
|
watchdog_view($id);
|
|
break;
|
|
case "Update":
|
|
watchdog_display($order);
|
|
break;
|
|
default:
|
|
watchdog_display();
|
|
}
|
|
break;
|
|
case "cron":
|
|
cron_display();
|
|
break;
|
|
case "stats":
|
|
stats_display();
|
|
break;
|
|
case "info":
|
|
info_display();
|
|
break;
|
|
case "home":
|
|
home_display();
|
|
break;
|
|
default:
|
|
print "<BR><BR><CENTER>Welcome to the adminstration center!</CENTER>\n";
|
|
}
|
|
|
|
admin_footer();
|
|
|
|
?>
|