<?php
/***************************************
****************************************
Page: admin.php
Created by: Marten
****************************************
***************************************/
include ( 'header.php' ) ;
if ( isset ( $_SESSION['login'] ) AND $_SESSION['login'] == 1 )
{
echo "
<table width='90%'>
<tr >
<td ><a href='admin.php' >Home</a ></td >
<td >" . $Scheidingsteken . "</td >
<td ><a href='admin.php?p=scheld' >Scheldwoorden</a ></td >
<td >" . $Scheidingsteken . "</td >
<td ><a href='admin.php?p=instellingen' >Instellingen</a ></td >
<td >" . $Scheidingsteken . "</td >
<td ><a href='admin.php?p=ban' >Bans</a ></td >
<td >" . $Scheidingsteken . "</td >
<td ><a href='admin.php?p=uitloggen' >Uitloggen</a ></td >
</tr >
</table >
<br >
<br >
<table width='90%' >
<tr >
<td colspan='2' width='50%' >Hier staan alle berichten van jou Berichtenbalk:<br ><br ></td >
<td rowspan='2' width='50%' > </td >
</tr >
<tr >
<td width='50%' >";
echo "
<table width='100%' >";
$Query = mysql_query ( "SELECT * FROM text ORDER BY datum DESC" ) or die ( mysql_error ( ) ) ;
while ( $Row = mysql_fetch_array ( $Query ) )
{
ubb_smileys ( $Row['bericht'] ) ;
ubb_ubb ( $Row['bericht'] ) ;
echo "
<tr >
<td >Naam:</td >
<td >" . $Row['naam'] . "</td >
</tr >
<tr >
<td >Email:</td >
<td >" . $Row['email'] . "</td >
</tr >
<tr >
<td >Homepage:</td >
<td >" . $Row['homepage'] . "</td >
</tr >
<tr >
<td >Bericht:</td >
<td >" . $Row['bericht'] . "</td >
</tr >
<tr >
<td >IP:</td >
<td >" . $Row['ip'] . "</td >
</tr >
<tr >
<td >Datum:</td >
<td >" . $qRow['datum'] . "</td >
</tr >
<tr >
<td ><a href='admin.php?e=edit&id=" . $Row['id'] . "' >Bewerken</a ></td >
<td ><a href='admin.php?d=delete&id=" . $Row['id'] . "' >Verwijderen</a ></td >
</tr >
<tr >
<td colspan='2'> </td >
</tr >";
}
echo "
</table >
</td >
<td valign='top' width='50%' >";
if ( isset ( $_GET['p'] ) AND $_GET['p'] == "uitloggen" )
{
session_destroy ( ) ;
header ( "Location: index.php" ) ;
}
elseif ( isset ( $_GET['p'] ) AND $_GET['p'] == "scheld" )
{
if ( isset ( $_GET['e'] ) AND $_GET['e'] == "edit" )
{
if ( isset ( $_POST['submit'] ) )
{
if ( empty ( $_POST['woord'] ) OR empty ( $_POST['vervang'] ) )
{
echo $tText['Invullen'] ;
exit();
}
$Query = mysql_query ( "UPDATE scheld SET
woord='" . $_POST['woord'] . "' ,
vervang='" . $_POST['vervang'] . "'
WHERE id='" . $_GET['id'] . "' " ) or die ( mysql_error ( ) ) ;
echo $tText['admin_edit_scheld'] ;
}
else
{
$Query = mysql_query ( "SELECT * FROM scheld WHERE id='" . $_GET['id'] . "'" ) or die ( mysql_error ( ) ) ;
$Row = mysql_fetch_array ( $Query ) ;
echo "
<form method='post' action='' >
<table width='100%' >
<tr >
<td colspan='2' >Je bent bezig met het bewerken van scheldwoord: " . $Row['naam'] . ".</td >
</tr >
<tr >
<td >Woord:</td >
<td ><input type='text' name='woord' value='" . $Row['woord'] . "' ></td >
</tr>
<tr >
<td >Vervangen door:</td >
<td ><input type='text' name='vervang' value='" . $Row['vervang'] . "' ></td >
</tr >
<tr >
<td > </td >
<td ><input type='submit' name='submit' value='Bewerk!' ></td >
</tr>
</table >
</form >";
}
}
elseif ( isset ( $_GET['d'] ) AND $_GET['d'] == "delete" )
{
$Query = mysql_query ( "DELETE FROM scheld WHERE id='" . $_GET['id'] . "'" ) or die ( mysql_error ( ) ) ;
echo $tText['admin_delete_scheld'] ;
}
elseif ( isset ( $_GET['n'] ) AND $_GET['n'] == "nieuw" )
{
if ( isset ( $_POST['submit'] ) )
{
if ( empty ( $_POST['woord'] ) OR empty ( $_POST['vervang'] ) )
{
echo $tText['Invullen'] ;
exit();
}
$Query = mysql_query ( "INSERT INTO scheld ( woord , vervang )
VALUES (
'" . $_POST['woord'] . "' ,
'" . $_POST['vervang'] . "'
)" ) or die ( mysql_error ( ) ) ;
echo $tText['admin_nieuw_scheld'] ;
}
else
{
echo "
<form method='post' action='' >
<table width='100%' >
<tr >
<td colspan='2' >Hier kun je een nieuw scheldwoord invoeren.</td >
</tr >
<tr >
<td >Woord:</td >
<td ><input type='text' name='woord' ></td >
</tr >
<tr >
<td >Vervangen door:</td >
<td ><input type='text' name='vervang' ></td >
</tr >
<tr >
<td > </td >
<td ><input type='submit' name='submit' value='submit' ></td >
</tr >
</table >
</form >";
}
}
else
{
echo "
<table width='100%' >
<tr >
<td ><b >Woord:</b ></td >
<td ><b >Vervangen door:</b ></td >
<td colspan='2' > </td >
</tr>";
$Query = mysql_query ( "SELECT * FROM scheld" ) or die ( mysql_error ( ) ) ;
while ( $Row = mysql_fetch_array ( $Query ) )
{
echo "
<tr >
<td >" . $Row['woord'] . "</td >
<td >" . $Row['vervang'] . "</td >
<td ><a href='admin.php?p=scheld&e=edit&id=" . $Row['id'] . "' >Bewerken</a ></td >
<td ><a href='admin.php?p=scheld&d=delete&id=" . $Row['id'] . "' >Verwijderen</a ></td >
</tr >";
}
echo "
</table >
<br >
<br >
<table width='100%'>
<tr >
<td ><a href='admin.php?p=scheld&n=nieuw' >Nieuw scheldwoord</a ></td >
</tr >
</table >";
}
}
elseif ( isset ( $_GET['p'] ) AND $_GET['p'] == "ban" )
{
if ( isset ( $_GET['d'] ) AND $_GET['d'] == "delete" )
{
$Query = mysql_query ( "DELETE FROM ban WHERE id='" . $_GET['id'] . "'" ) or die ( mysql_error ( ) ) ;
echo $tText['admin_delete_ban'] ;
}
elseif ( isset ( $_GET['n'] ) AND $_GET['n'] == "nieuw" )
{
if ( isset ( $_POST['submit'] ) )
{
if ( empty ( $_POST['ip'] ) )
{
echo $tText['Invullen'] ;
exit();
}
$Query = mysql_query ( "INSERT INTO ban ( ip )
VALUES (
'" . $_POST['ip'] . "' )" ) or die ( mysql_error ( ) ) ;
echo $tText['admin_nieuw_ban'] ;
}
else
{
echo "
<form method='post' action='' >
<table width='100%' >
<tr >
<td colspan='2' >Hier kun je een nieuwe ban invoeren.</td >
</tr >
<tr >
<td >IP:</td >
<td ><input type='text' name='ip' maxlength='11' ></td >
</tr >
<tr >
<td > </td >
<td ><input type='submit' name='submit' value='submit' ></td >
</tr >
</table >
</form >";
}
}
else
{
echo "
<table width='100%' >
<tr >
<td ><b >IP:</b ></td >
<td > </td >
</tr>";
$Query = mysql_query ( "SELECT * FROM ban" ) or die ( mysql_error ( ) ) ;
while ( $Row = mysql_fetch_array ( $Query ) )
{
echo "
<tr >
<td >" . $Row['ip'] . "</td >
<td ><a href='admin.php?p=ban&d=delete&id=" . $Row['id'] . "' >Verwijderen</a ></td >
</tr >";
}
echo "
</table >
<br >
<br >
<table width='100%'>
<tr >
<td ><a href='admin.php?p=ban&n=nieuw' >Nieuwe Ban</a ></td >
</tr >
</table >";
}
}
elseif ( isset ( $_GET['p'] ) AND $_GET['p'] == "instellingen" )
{
if ( isset ( $_POST['submit'] ) )
{
if ( empty ( $_POST['scheidingsteken'] ) OR empty ( $_POST['login'] ) OR empty ( $_POST['pass'] ) )
{
echo $tText['Invullen'] ;
exit();
}
$Query = mysql_query ( "UPDATE instellingen SET
scheidingsteken='" . $_POST['scheidingsteken'] . "' ,
scheidingsteken_wat='" . $_POST['scheidingsteken_wat'] . "' ,
login='" . $_POST['login'] . "' ,
pass='" . md5 ( $_POST['pass'] ) . "'
" ) or die ( mysql_error ( ) ) ;
echo $tText['admin_instellingen'] ;
}
else
{
$Query = mysql_query ( "SELECT * FROM instellingen" ) or die ( mysql_error ( ) ) ;
$Row = mysql_fetch_array ( $Query ) ;
if ( $Row['scheidingsteken_wat'] == "img" )
{
$Row['scheidingsteken_wat'] = "<select name='scheidingsteken_wat' >
<option value='img' >IMG</option >
<option value='text' >Text</option >
</select >";
}
else
{
$Row['scheidingsteken_wat'] = "<select name='scheidingsteken_wat' >
<option value='text' >Text</option >
<option value='img' >IMG</option >
</select >";
}
echo "
<form method='post' action='' >
<table width='100%' >
<tr >
<td colspan='3' >Hier kun je de instellingen voor je Berichtenbalk veranderen.</td >
</tr >
<tr >
<td >Scheidingsteken:</td >
<td ><input type='text' name='scheidingsteken' value='" . $Row['scheidingsteken'] . "' ></td >
<td >" . $Row['scheidingsteken_wat'] . "</td >
</tr >
<tr >
<td >Login:</td >
<td ><input type='text' name='login' value='" . $Row['login'] . "' ></td >
<td > </td >
</tr >
<tr >
<td >Pass:</td >
<td ><input type='password' name='pass' value='" . $Row['pass'] . "' ></td >
<td > </td >
</tr >
<tr >
<td colspan='3' ><input type='submit' name='submit' value='Sla op!' ></td >
</tr >
</table >
</form >";
}
}
elseif ( isset ( $_GET['e'] ) AND $_GET['e'] == "edit" )
{
if ( isset ( $_POST['submit'] ) )
{
if ( empty ( $_POST['naam'] ) OR empty ( $_POST['bericht'] ) )
{
echo $tText['Invullen'] ;
exit();
}
if ( $_POST['email'] != "" )
{
if ( !preg_match ( "/^[A-Z0-9._%-]+@[A-Z0-9._%-]+.[A-Z]{2,6}$/i" , $_POST['email'] ) )
{
echo $tText['email'] ;
exit();
}
}
$Query = mysql_query ( "UPDATE text SET
naam = '" . trim ( htmlspecialchars ( $_POST['naam'] ) ) . "' ,
email = '" . trim ( htmlspecialchars ( $_POST['email'] ) ) . "' ,
homepage = '" . trim ( htmlspecialchars ( $_POST['homepage'] ) ) . "' ,
bericht = '" . trim ( htmlspecialchars ( $_POST['bericht'] ) ) . "'
WHERE id='" . $_GET['id'] . "'" ) or die ( mysql_error ( ) ) ;
echo $tText['admin_edit_goed'] ;
}
else
{
$Query = mysql_query ( "SELECT * FROM text WHERE id='" . $_GET['id'] . "'" ) or die ( mysql_error ( ) ) ;
$Row = mysql_fetch_array ( $Query ) ;
echo "
<form method='post' action='' name='text' >
<table width='100%' >
<tr >
<td colspan='2' >Je bent bezig met het bewerken van het bericht van " . $Row['naam'] . ".</td >
</tr >
<tr >
<td colspan='2' > </td >
</tr >
<tr >
<td >Naam: <span class='rood' >*</span ></td >
<td ><input type='text' name='naam' maxlength='150' value='" . $Row['naam'] . "' ></td >
</tr >
<tr >
<td >Email:</td >
<td ><input type='text' name='email' maxlength='150' value='" . $Row['email'] . "' ></td >
</tr >
<tr >
<td >Homepage:</td >
<td ><input type='text' name='homepage' value ='http://' maxlength='150' value='" . $Row['homepage'] . "' ></td >
</tr >
<tr >
<td rowspan='3' >Bericht: <span class='rood'>*</span ></td >
<td >";
ubb_smileys_post ( ) ;
echo "
</td >
</tr >
<tr >
<td ><textarea name='bericht' rows='5' cols='20' wrap='visical' >" . $Row['bericht'] . "</textarea ></td >
</tr >
<tr >
<td >";
ubb_ubb_post ( ) ;
echo "
</td >
</tr >
<tr >
<td > </td >
<td ><span class='rood' >Velden met * zijn verplicht.</span ></td >
</tr >
<tr >
<td colspan='2' > </td >
</tr >
<tr >
<td > </td >
<td ><input type='submit' name='submit' value='Post!' ></td >
</tr >
</table >
</form >";
}
}
elseif ( isset ( $_GET['d'] ) AND $_GET['d'] == "delete" )
{
$Query = mysql_query ( "DELETE FROM text WHERE id='" . $_GET['id'] . "'" ) or die ( mysql_error ( ) ) ;
echo $tText['admin_delete_goed'] ;
}
else
{
echo " ";
}
echo "
</td >
</tr >
</table >";
}
else
{
if ( isset ( $_POST['submit'] ) )
{
if ( $_POST['login'] == $Login AND md5 ( $_POST['pass'] ) == $Pass )
{
$_SESSION['login'] = 1;
header ( "Refresh: 2; admin.php" ) ;
echo $tText['admin_goed'] ;
}
else
{
echo $tText['admin_fout'] ;
}
}
else
{
echo "
<form method='post' action='' >
<table width='100%' >
<tr >
<td colspan='2' >Welkom, voer de juiste logincode en wachtwoord in om toegang te krijgen tot het admingedeelte.</td >
</tr >
<tr >
<td >Loginnaam:</td >
<td ><input type='text' name='login' ></td >
</tr >
<tr >
<td >Wachtwoord:</td >
<td ><input type='password' name='pass' ></td >
</tr >
<tr >
<td > </td >
<td ><input type='submit' name='submit' value='Log in!' ></td >
</tr >
</table >
</form >";
}
}
include ( 'footer.php' ) ;
?>
Console games waar je niets van leert moeten worden afgeschaft. (S: 17, R: 7)
