ponepaste/admin/pages.php

263 lines
12 KiB
PHP
Raw Normal View History

2021-07-10 19:18:17 +01:00
<?php
/*
* Paste <https://github.com/jordansamuel/PASTE>
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 3
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License in GPL.txt for more details.
*/
define('IN_ADMIN', 1);
require_once('common.php');
2021-07-10 19:18:17 +01:00
updateAdminHistory($conn);
2021-07-10 19:18:17 +01:00
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
if (isset($_POST{'editme'})) {
$edit_me_id = htmlentities(Trim($_POST['editme']));
$page_name = Trim($_POST['page_name']);
$page_title = Trim($_POST['page_title']);
2021-07-10 19:18:17 +01:00
$page_content = $_POST['data'];
2021-07-10 19:18:17 +01:00
$query = "UPDATE pages SET last_date='$date', page_name='$page_name', page_title='$page_title', page_content='$page_content' WHERE id='$edit_me_id'";
mysqli_query($con, $query);
} else {
$page_name = Trim($_POST['page_name']);
$page_title = Trim($_POST['page_title']);
2021-07-10 19:18:17 +01:00
$page_content = $_POST['data'];
2021-07-10 19:18:17 +01:00
$query = "INSERT INTO pages (last_date,page_name,page_title,page_content) VALUES ('$date','$page_name','$page_title','$page_content')";
mysqli_query($con, $query);
}
$page_name = "";
$page_title = "";
2021-07-10 19:18:17 +01:00
$page_content = "";
}
if (isset($_GET{'edit'})) {
2021-07-10 19:18:17 +01:00
$page_id = trim($_GET['edit']);
$sql = "SELECT * FROM pages where id='$page_id'";
$result = mysqli_query($con, $sql);
2021-07-10 19:18:17 +01:00
//we loop through each records
while ($row = mysqli_fetch_array($result)) {
//populate and display results data in each row
$page_name = $row['page_name'];
$page_title = $row['page_title'];
2021-07-10 19:18:17 +01:00
$page_content = $row['page_content'];
}
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Paste - Pages</title>
<link rel="shortcut icon" href="favicon.ico">
<link href="css/paste.css" rel="stylesheet" type="text/css"/>
<link href="css/bootstrap3-wysihtml5.min.css" rel="stylesheet" type="text/css"/>
</head>
<body>
<div id="top" class="clearfix">
<!-- Start App Logo -->
<div class="applogo">
<a href="../" class="logo">Paste</a>
</div>
<!-- End App Logo -->
2021-07-10 19:18:17 +01:00
<!-- Start Top Right -->
<ul class="top-right">
<li class="dropdown link">
<a href="#" data-toggle="dropdown" class="dropdown-toggle profilebox"><b>Admin</b><span
class="caret"></span></a>
<ul class="dropdown-menu dropdown-menu-list dropdown-menu-right">
<li><a href="admin.php">Settings</a></li>
<li><a href="?logout">Logout</a></li>
</ul>
</li>
</ul>
<!-- End Top Right -->
</div>
<!-- END TOP -->
2021-07-10 19:18:17 +01:00
<div class="content">
<!-- START CONTAINER -->
<div class="container-widget">
<!-- Start Menu -->
<?php include 'menu.php'; ?>
<!-- End Menu -->
2021-07-10 19:18:17 +01:00
<!-- Start Pages -->
<div class="row">
<div class="col-md-12">
<div class="panel panel-widget">
<div class="panel-body">
<div class="panel-title">Add a Page</a></div>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" class="form-horizontal" method="post">
<div class="control-group">
<label for="page_name">Page name (No spaces, e.g. terms_of_service)</label> <input
class="span6" id=
"page_name" name="page_name" placeholder="Enter page name"
type="text" value="<?php echo isset($page_name); ?>">
</div>
<div class="control-group">
<label for="page_title">Page title</label> <input class=
"span6" id="page_title"
name="page_title" placeholder=
"Enter page title" type="text"
value=
"<?php echo isset($page_title); ?>">
</div>
<br/>
<?php
if (isset($_GET{'edit'})) {
echo '<input type="hidden" value=' . $_GET['edit'] . 'id="editme" name="editme" />';
}
?>
<div class='control-group'>
<textarea class="span6" cols="80" id="editor1" name="data"
rows="10"><?php echo isset($page_content); ?></textarea><br>
</div>
<button class="btn btn-default btn-sm">Save</button>
</form>
</div>
</div>
</div>
</div>
<div class="row">
<div class="col-md-12">
<div class="panel panel-widget">
<div class="panel-body">
<div class="panel-title">Pages</div>
<table class="table table-striped">
<tbody>
<tr>
<th>Date Added</th>
<th>Page Name</th>
<th>Page Title</th>
<th>View</th>
<th>Edit</th>
<th>Delete</th>
<?php
if (isset($_GET{'delete'})) {
$delete = htmlentities(Trim($_GET['delete']));
$query = "DELETE FROM pages WHERE id=$delete";
$result = mysqli_query($con, $query);
if (mysqli_errno($con)) {
echo '<div class="paste-alert alert6">
2021-07-10 19:18:17 +01:00
' . mysqli_error($con) . '
</div>';
} else {
echo '
2021-07-10 19:18:17 +01:00
<div class="paste-alert alert3">
Page deleted.
</div>';
}
}
$rec_limit = 20;
$query = "SELECT count(id) FROM pages";
$retval = mysqli_query($con, $query);
$row = mysqli_fetch_array($retval);
$rec_count = Trim($row[0]);
2021-07-10 19:18:17 +01:00
if (isset($_GET['page'])) { // Get the current page
$page = $_GET['page'] + 1;
$offset = $rec_limit * $page;
} else {
// Show first set of results
$page = 0;
$offset = 0;
}
$left_rec = $rec_count - ($page * $rec_limit);
// Set the specific query to display in the table
$sql = "SELECT * FROM pages ORDER BY `id` DESC LIMIT $offset, $rec_limit";
$result = mysqli_query($con, $sql);
$no = 1;
// Loop through each records
while ($row = mysqli_fetch_array($result)) {
// Populate and display results data in each row
echo '<tr>';
echo '<td>' . $row['last_date'] . '</td>';
echo '<td>' . $row['page_name'] . '</td>';
echo '<td>' . $row['page_title'] . '</td>';
$myid = $row['id'];
echo '<td>' . "<a class='btn btn-success btn-sm' href=../page/" . $row['page_name'] . "> View </a>" . '</td>';
echo '<td>' . "<a class='btn btn-default btn-sm' href=" . $_PHP_SELF . "?edit=" . $myid . "> Edit </a>" . '</td>';
echo '<td>' . "<a class='btn btn-danger btn-sm' href=" . $_PHP_SELF . "?delete=" . $myid . "> Delete </a>" . '</td>';
$no++;
}
echo '</tr>';
echo '</tbody>';
echo '</table>';
// Display the pagination
echo '<ul class="pager">';
if ($left_rec < $rec_limit) {
$last = $page - 2;
if ($last < 0) {
2021-07-10 19:18:17 +01:00
} else {
echo @"<li><a href=\"$_PHP_SELF?page=$last\">Previous</a></li>";
}
} elseif ($page == 0) {
echo @"<li><a href=\"$_PHP_SELF?page=$page\">Next</a></li>";
} elseif ($page > 0) {
$last = $page - 2;
echo @"<li><a href=\"$_PHP_SELF?page=$last\">Previous</a></li> ";
echo @"<li><a href=\"$_PHP_SELF?page=$page\">Next</a></li>";
}
echo '</ul>';
?>
</div>
</div>
</div>
</div>
<!-- End Pages -->
</div>
<!-- END CONTAINER -->
2021-07-10 19:18:17 +01:00
<!-- Start Footer -->
<div class="row footer">
<div class="col-md-6 text-left">
<a href="https://github.com/jordansamuel/PASTE" target="_blank">Updates</a> &mdash; <a
href="https://github.com/jordansamuel/PASTE/issues" target="_blank">Bugs</a>
</div>
<div class="col-md-6 text-right">
Powered by <a href="https://phpaste.sourceforge.io" target="_blank">Paste</a>
</div>
</div>
<!-- End Footer -->
</div>
<!-- End content -->
2021-07-10 19:18:17 +01:00
<script type="text/javascript" src="js/jquery.min.js"></script>
<script type="text/javascript" src="js/bootstrap.min.js"></script>
2021-07-10 19:18:17 +01:00
<!-- CK Editor -->
<script src="js/plugins/ckeditor/ckeditor.js" type="text/javascript"></script>
2021-07-10 19:18:17 +01:00
<!-- Bootstrap WYSIHTML5 -->
<script src="js/bootstrap3-wysihtml5.all.min.js" type="text/javascript"></script>
2021-07-10 19:18:17 +01:00
<script type="text/javascript">
$(function () {
CKEDITOR.replace('editor1');
});
</script>
</body>
</html>
2021-07-10 19:18:17 +01:00
<?php mysqli_close($con); ?>