#
# File name: Admin.php
# Author: Kingsley
# Date: 16/12/2008
# Time: 5:35 PM
#
if(!defined("IN_BGS")){
include("../404.php");
}
if(!defined("IN_ADMIN")) {
include("../404.php");
}
if($_SESSION["committee"]["tag"] != "@Admin" || $_SESSION["user"]["level"] < 5){
print "";
} else {
?>
Admin Panel
switch($_GET["function"]){
case "add_notice";
?>
break;
case "activate_manually";
?>
//get logs!
if(!isset($_GET["pagenum"])){
$page = 1;
} else {
$page = $_GET["pagenum"];
}
$max_results = 30;
$from = (($page * $max_results) - $max_results);
$sql = mysql_query("SELECT * FROM `verify` ORDER BY time DESC LIMIT $from, $max_results");
print "
";
print "";
?>
|
break;
case "online_search";
?>
break;
case "send_mail";
?>
break;
case "view_refferals";
$GetR = mysql_query("SELECT * from refferers");
while($Row = mysql_fetch_array($GetR)){
print "{$Row['line']} ";
}
break;
case "add_news";
?>
break;
case "add_committee";
?>
break;
case "add_to_committee";
?>
break;
case "remove_committee";
?>
break;
case "view_admin_logs";
//get logs!
if(!isset($_GET["pagenum"])){
$page = 1;
} else {
$page = $_GET["pagenum"];
}
$max_results = 30;
$from = (($page * $max_results) - $max_results);
if(isset($_COOKIE["smember_search"])) {
$sql = mysql_query("SELECT * FROM `adminlogs` WHERE admin LIKE '".addslashes($_COOKIE["smember_search"])."%' ORDER BY time DESC LIMIT $from, $max_results");
} else {
$sql = mysql_query("SELECT * FROM `adminlogs` ORDER BY time DESC LIMIT $from, $max_results");
}
print "Admin What Who Accepted Date/Time ";
while($row = mysql_fetch_array($sql)){
$admin = $row["admin"];
$what = $row["what"];
$who = $row["who"];
$accepted = $row["accepted"];
$timestamp = $row["time"];
$timestamp = date("d-n-Y g:i:s A",$timestamp);
print "
$admin
$what
$who
$accepted
$timestamp
";
}
// Figure out the total number of results in DB:
if(isset($_COOKIE["smember_search"])) {
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM `adminlogs` where admin LIKE '".addslashes($_COOKIE["smember_search"])."%'"),0);
} else {
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM `adminlogs`"),0);
}
// Figure out the total number of pages. Always round up using ceil()
$total_pages = ceil($total_results / $max_results);
// Build Page Number Hyperlinks
echo "
";
if(isset($_COOKIE["smember_search"])) {
print "
";
} else {
print "
";
}
print "";
break;
case "add_download";
?>
break;
case "add_link";
?>
break;
case "view_banlist";
//get logs!
if(!isset($_GET["pagenum"])){
$page = 1;
} else {
$page = $_GET["pagenum"];
}
$max_results = 30;
$from = (($page * $max_results) - $max_results);
$sql = mysql_query("SELECT username, email, dnsaddr from `users` where level = '-1' LIMIT $from, $max_results");
print "Admin What Who Date/Time DNS ";
while($row = mysql_fetch_array($sql)){
if(isset($_COOKIE["smember_search"])) {
$sqlinfo = mysql_query("select * from adminlogs where (what = 'Userban' OR what = 'Nickban') AND admin LIKE '".addslashes($_COOKIE["smember_search"])."%' and who = '".$row["username"]."' ORDER by time DESC limit 1");
} else {
$sqlinfo = mysql_query("select * from adminlogs where (what = 'Userban' OR what = 'Nickban') AND admin LIKE and who = '".$row["username"]."' ORDER by time DESC limit 1");
}
if(@mysql_num_rows($sqlinfo) > 0) {
$toolinfo = mysql_fetch_array($sqlinfo);
$admin = $toolinfo["admin"];
if($admin == "") { $admin = "!".$row["username"]; }
$what = $toolinfo["what"];
$who = $toolinfo["who"];
$timestamp = $toolinfo["time"];
$timestamp = date("d-n-Y g:i:s A",$timestamp);
$dns = $row["dnsaddr"];
print "
$admin
$what
$who
$timestamp
$dns
";
}
}
// Figure out the total number of results in DB:
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM `users` where level = '-1'"),0);
// Figure out the total number of pages. Always round up using ceil()
$total_pages = ceil($total_results / $max_results);
// Build Page Number Hyperlinks
echo "
";
if(isset($_COOKIE["smember_search"])) {
print "
";
} else {
print "
";
}
print "";
break;
} //end admin function case!
switch($_GET["action"]){
case "add_notice";
//First must calculate the date start and stops
$date_start_c = mktime($_POST["s_hour"], $_POST["s_min"], 0, $_POST["s_month"], $_POST["s_day"], $_POST["s_year"]);
$date_end_c = mktime($_POST["e_hour"], $_POST["e_min"], 0, $_POST["e_month"], $_POST["e_day"], $_POST["e_year"]);
if($date_start_c > $date_end_c) {
print "Ending date cannot be before the starting date!";
} else {
print AddNotice($date_start_c, $date_end_c, $_POST["subject"], $_POST["service"], $_POST["committee"], $_POST["details"], $_POST["severity"]);
}
break;
case "online_search";
$Member = $_POST["Member"];
$member = addslashes($Member);
print SearchForMemberOnline($member);
break;
case "search_staff";
if(isset($_POST["smember"])) {
print "";
} else {
print "";
}
break;
case "do_activate";
if ($_POST["Delete"] == "Delete") {
if(isset($_POST["check"])){
while(list($check,$checksum) = each($_POST["check"])){
$checksum = addslashes($checksum);
mysql_query("DELETE from verify where username='$checksum'");
}
print "Deleted!";
}
} elseif($_POST["Activate"] == "Activate") {
if(isset($_POST["check"])){
while(list($check,$checksum) = each($_POST["check"])){
$checksum = addslashes($checksum);
mysql_query("DELETE from verify where username='$checksum'");
mysql_query("Update users set level='0', verified = 1 where username='$checksum'");
mysql_query("UPDATE phpbb_users enabled = 1 where username = '$checksum'");
}
print "Activated!";
}
}
break;
case "send_mail";
$name = $_POST["Name"];
$subject = $_POST["Subject"];
$message = $_POST["Message"];
$adminp = $_GET["committee"];
if($name != "" && $subject != "" && $message != ""){
$message .= "\nFrom: $adminp";
mail("kingsley@beyondgaming.org", $subject, $message, "From: $name ");
print "Email sent! ";
} else {
print "Make sure to fill out all forms! ";
}
break;
case "Site_Open";
if($_SESSION["committee"]["name"] == "Admin" && $_SESSION["user"]["level"] == 7){
if($config["Site_Open"]){
mysql_query("UPDATE site_config set site_value = 0 where site_option = 'Site_Open'");
?>
} else {
mysql_query("UPDATE site_config set site_value = 1 where site_option = 'Site_Open'");
?>
}
}
break;
case "User_Register";
if($_SESSION["committee"]["name"] == "Admin" && $_SESSION["user"]["level"] == 7){
if($config["User_Register"]){
mysql_query("UPDATE site_config set site_value = 0 where site_option = 'User_Register'");
?>
} else {
mysql_query("UPDATE site_config set site_value = 1 where site_option = 'User_Register'");
?>
}
}
break;
case "Site_Download";
if($_SESSION["committee"]["name"] == "Admin" && $_SESSION["user"]["level"] == 7){
if($config["Site_Download"]){
mysql_query("UPDATE site_config set site_value = 0 where site_option = 'Site_Download'");
?>
} else {
mysql_query("UPDATE site_config set site_value = 1 where site_option = 'Site_Download'");
?>
}
}
break;
case "adding_download";
$link = addslashes($_POST["link"]);
$name = addslashes($_POST["name"]);
$desc = addslashes($_POST["description"]);
if(trim($link) != ""){
if($_SESSION["committee"]["name"] == "Admin" && $_SESSION["user"]["level"] >= 6){
mysql_query("INSERT into `download` VALUES('0', '$name', '$desc', '$link','0')") or die(mysql_error());
print "Added download $link";
mysql_query("INSERT INTO `adminlogs` values('$myname', 'Adding download', '$link','Approved','$time')");
} else {
print "Cannot add the download. Check you have the right privlages!";
mysql_query("INSERT INTO `adminlogs` values('$myname', 'Adding download', '$link', 'Approved','$time')");
}
} else {
print "Please enter a download link.";
}
break;
case "adding_link";
$link = addslashes($_POST["link"]);
if(trim($link) != ""){
if($_SESSION["committee"]["name"] == "Admin" && $_SESSION["user"]["level"] >= 6){
$id = mysql_num_rows(mysql_query("SELECT * from `links`")) + 1;
mysql_query("INSERT into `links` VALUES('$id','$link','0')");
print "Added link $link, with id $id";
mysql_query("INSERT INTO `adminlogs` values('$myname', 'Adding link', '$link','Approved','$time')");
} else {
print "Cannot add the link. Check you have the right privlages!";
mysql_query("INSERT INTO `adminlogs` values('$myname', 'Adding link', '$link', 'Approved','$time')");
}
} else {
print "Please enter a link";
}
break;
case "removing_committee";
$commtoremove = addslashes($_POST["committee"]);
if(trim($commtoremove) != ""){
if($_SESSION["committee"]["name"] == "Admin" && $_SESSION["user"]["level"] == 7){
$users = mysql_query("SELECT * from users where committee = '$commtoremove'");
$tag = mysql_fetch_array(mysql_query("SELECT tag from committees where commname = '$commtoremove'"));
$tag = $tag["tag"];
while($user = mysql_fetch_array($users)) {
$uname = $users["username"];
if($user["level"] > 4) {
$newNick = str_replace($tag, "", $uname);
mysql_query("UPDATE users SET username = '$newNick' WHERE username = '$uname'");
$uname = $newNick;
}
mysql_query("UPDATE users set level='0', committee='User' where username = '$uname'");
}
print "Committee removed!";
mysql_query("Insert into `adminlogs` values('$myname', 'Removed committee', '$commtoremove', 'Accepted', '$time')");
} else {
print "You do not have the required privlages to remove a committee!";
mysql_query("INSERT INTO `adminlogs` values('$myname', 'Remove committee','$commtoremove', 'Denied', '$time')");
}
} else {
print "Please enter a committee to remove";
}
break;
case "add_news";
$subject = addslashes($_POST["subject"]);
$text = addslashes($_POST["news"]);
$author = $_SESSION["user"]["name"];
if(trim($subject) != "" && trim($text) != "" && trim($author) != ""){
if($_SESSION["committee"]["name"] == "Admin" && $_SESSION["user"]["level"] >= 6){
mysql_query("INSERT INTO `news` VALUES ('0', '$author', '$subject', '$text', '".time()."')");
print "News added!";
mysql_query("INSERT INTO `adminlogs` VALUES ('$myname', 'Added News item', '$subject', 'Accepted', '$time')");
} else {
print "You do not have the required privlages to add a news item!";
mysql_query("INSERT INTO `adminlogs` VALUES ('$myname', 'Added News item', '$subject', 'Declined', '$time')");
}
} else {
print "You must enter information!";
}
break;
case "adding_committee";
//get data
$CommName = addslashes(trim($_POST["commname"]));
$CommToken = addslashes(trim($_POST["token"])); //html_entity_decode()
$CommTag = addslashes(trim($_POST["tag"]));
//check if they're allowed!
if(trim($CommName) != "" && trim($CommToken) != "" && trim($CommTag) != ""){
if($_SESSION["committee"]["name"] == "Admin" && $_SESSION["user"]["level"] == 7){
if(substr($CommTag, 0, 1) != "@") {
$CommTag = "@".$CommTag;
}
mysql_query("INSERT INTO `committees` VALUES ('$CommName', '$CommToken', '$CommTag')");
print "Committie $CommName Created, Example nick: $CommToken$adminuser, or $CommToken$adminuser$CommTag";
mysql_query("INSERT INTO `adminlogs` values ('$myname', 'Create Committee', '$commname', 'Accepted', '$time')");
} else {
print "You do not have the required privliges to create a committee!";
mysql_query("INSERT INTO `adminlogs` values ('$myname', 'Create Committee', '$commname', 'Declined', '$time')");
}
} else {
print "You must enter information!";
}
break;
case "adding_member_to_committee";
$member = trim(addslashes($_POST["name"]));
$CommName = addslashes($_POST["commname"]);
$level = addslashes($_POST["level"]);
if(trim($member) != "" && trim($CommName) != "" && trim($level) != "") {
print AddMemberToCommittee($member, $CommName, $level);
} else {
print "You must enter information!";
}
break;
} // end function case
} // end admin case!
?>