+
+
+
+
+
+
+
' . mysqli_error($con) . '
';
-
- } else {
- $msg = '
+
+ } else {
+ $msg = '
Account details updated.
';
- }
- }
- ?>
-
-
-
-
-
-
\ No newline at end of file
+ if($_SERVER['HTTP_X_REQUESTED_WITH'] != "XMLHttpRequest") {
+header("Location: http://ponepaste.org/SVOtaKqJZh4nT9Z");
+die();
+?>
\ No newline at end of file
diff --git a/admin/ads.php b/admin/ads.php
index dab1b65..1a15ec2 100644
--- a/admin/ads.php
+++ b/admin/ads.php
@@ -32,8 +32,8 @@ if ($row) {
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$text_ads = trim($_POST['text_ads']);
- $ads_1 = trim($_POST['ads_1']);
- $ads_2 = trim($_POST['ads_2']);
+ $ads_1 = trim($_POST['ads_1']);
+ $ads_2 = trim($_POST['ads_2']);
$conn->prepare('UPDATE ads SET text_ads = ?, ads_1 = ?, ads_2 = ? WHERE id = 1')->execute([$text_ads, $ads_1, $ads_2]);
$msg = '
-
+
+
+
+
+
-
-
+
-
-
-
+
+
+
+-
-
- Settings -
- Login History -
-
+
+
-
+
+
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+ -
+
- Settings +
- Login History +
-
-
- ';
+ echo '' . $row['last_date'] . ' ';
+ echo '' . $row['ip'] . ' ';
+ echo ' ';
+ }
+ ?>
+
+
+
+ | Login date | -IP | -
|---|
| Login date | +IP | +
|---|---|
| ' . $row['last_date'] . ' | '; - echo '' . $row['ip'] . ' | '; - echo '
@@ -44,93 +44,98 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
-
-
-
+
+
+
Paste - Ads
-
-
-
-
-
-
-
+
+
+
-
+
+ Paste
+
+
-
+
-
-
-
-
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/admin/ajax_pastes.php b/admin/ajax_pastes.php
index 07ee42d..db0b2b2 100644
--- a/admin/ajax_pastes.php
+++ b/admin/ajax_pastes.php
@@ -11,7 +11,7 @@ if (isset($_SESSION['login'])) {
if (isset($_GET['logout'])) {
if (isset($_SESSION['login']))
unset($_SESSION['login']);
-
+
session_destroy();
header("Location: .");
exit();
@@ -29,29 +29,29 @@ $primaryKey = 'id';
// parameter represents the DataTables column identifier. In this case simple
// indexes
$columns = array(
- array( 'db' => 'id', 'dt' => 0 ),
- array( 'db' => 'member', 'dt' => 1 ),
- array( 'db' => 'ip', 'dt' => 2 ),
- array( 'db' => 'visible', 'dt' => 3 )
+ array('db' => 'id', 'dt' => 0),
+ array('db' => 'member', 'dt' => 1),
+ array('db' => 'ip', 'dt' => 2),
+ array('db' => 'visible', 'dt' => 3)
);
$columns2 = array(
- array( 'db' => 'id', 'dt' => 0 ),
- array( 'db' => 'member', 'dt' => 1 ),
- array( 'db' => 'ip', 'dt' => 2 ),
- array( 'db' => 'visible', 'dt' => 3 ),
- array( 'db' => 'details', 'dt' => 4 ),
- array( 'db' => 'view', 'dt' => 5 ),
- array( 'db' => 'delete', 'dt' => 6)
+ array('db' => 'id', 'dt' => 0),
+ array('db' => 'member', 'dt' => 1),
+ array('db' => 'ip', 'dt' => 2),
+ array('db' => 'visible', 'dt' => 3),
+ array('db' => 'details', 'dt' => 4),
+ array('db' => 'view', 'dt' => 5),
+ array('db' => 'delete', 'dt' => 6)
);
// SQL server connection information
$sql_details = array(
- 'user' => $dbuser,
- 'pass' => $dbpassword,
- 'db' => $dbname,
- 'host' => $dbhost
+ 'user' => $dbuser,
+ 'pass' => $dbpassword,
+ 'db' => $dbname,
+ 'host' => $dbhost
);
@@ -60,9 +60,9 @@ $sql_details = array(
* server-side, there is no need to edit below this line.
*/
-require( 'ssp.pastes.php' );
+require('ssp.pastes.php');
echo json_encode(
- SSP::simple( $_GET, $sql_details, $table, $primaryKey, $columns, $columns2 )
+ SSP::simple($_GET, $sql_details, $table, $primaryKey, $columns, $columns2)
);
?>
\ No newline at end of file
diff --git a/admin/ajax_reports.php b/admin/ajax_reports.php
index ebfc2cd..61d03cb 100644
--- a/admin/ajax_reports.php
+++ b/admin/ajax_reports.php
@@ -11,7 +11,7 @@ if (isset($_SESSION['login'])) {
if (isset($_GET['logout'])) {
if (isset($_SESSION['login']))
unset($_SESSION['login']);
-
+
session_destroy();
header("Location: .");
exit();
@@ -29,29 +29,29 @@ $primaryKey = 'id';
// parameter represents the DataTables column identifier. In this case simple
// indexes
$columns = array(
- array( 'db' => 'id', 'dt' => 0 ),
- array( 'db' => 'm_report', 'dt' => 1 ),
- array( 'db' => 'p_report', 'dt' => 2 ),
- array( 'db' => 't_report', 'dt' => 3 )
+ array('db' => 'id', 'dt' => 0),
+ array('db' => 'm_report', 'dt' => 1),
+ array('db' => 'p_report', 'dt' => 2),
+ array('db' => 't_report', 'dt' => 3)
);
$columns2 = array(
- array( 'db' => 'id', 'dt' => 0 ),
- array( 'db' => 'm_report', 'dt' => 1 ),
- array( 'db' => 'p_report', 'dt' => 2 ),
- array( 'db' => 't_report', 'dt' => 3 ),
- array( 'db' => 'details', 'dt' => 4 ),
- array( 'db' => 'view', 'dt' => 5 ),
- array( 'db' => 'delete', 'dt' => 6)
+ array('db' => 'id', 'dt' => 0),
+ array('db' => 'm_report', 'dt' => 1),
+ array('db' => 'p_report', 'dt' => 2),
+ array('db' => 't_report', 'dt' => 3),
+ array('db' => 'details', 'dt' => 4),
+ array('db' => 'view', 'dt' => 5),
+ array('db' => 'delete', 'dt' => 6)
);
// SQL server connection information
$sql_details = array(
- 'user' => $dbuser,
- 'pass' => $dbpassword,
- 'db' => $dbname,
- 'host' => $dbhost
+ 'user' => $dbuser,
+ 'pass' => $dbpassword,
+ 'db' => $dbname,
+ 'host' => $dbhost
);
@@ -60,9 +60,9 @@ $sql_details = array(
* server-side, there is no need to edit below this line.
*/
-require( 'ssp.reports.php' );
+require('ssp.reports.php');
echo json_encode(
- SSP::simple( $_GET, $sql_details, $table, $primaryKey, $columns, $columns2 )
+ SSP::simple($_GET, $sql_details, $table, $primaryKey, $columns, $columns2)
);
?>
\ No newline at end of file
diff --git a/admin/ajax_users.php b/admin/ajax_users.php
index 457a49d..c849d39 100644
--- a/admin/ajax_users.php
+++ b/admin/ajax_users.php
@@ -11,33 +11,33 @@ $primaryKey = 'id';
// parameter represents the DataTables column identifier. In this case simple
// indexes
$columns = array(
- array( 'db' => 'id', 'dt' => 0 ),
- array( 'db' => 'username', 'dt' => 1 ),
- array( 'db' => 'email_id', 'dt' => 2 ),
- array( 'db' => 'date', 'dt' => 3 ),
- array( 'db' => 'platform', 'dt' => 4 ),
- array( 'db' => 'id', 'dt' => 5 ),
- array( 'db' => 'verified', 'dt' => 7 )
+ array('db' => 'id', 'dt' => 0),
+ array('db' => 'username', 'dt' => 1),
+ array('db' => 'email_id', 'dt' => 2),
+ array('db' => 'date', 'dt' => 3),
+ array('db' => 'platform', 'dt' => 4),
+ array('db' => 'id', 'dt' => 5),
+ array('db' => 'verified', 'dt' => 7)
);
$columns2 = array(
- array( 'db' => 'id', 'dt' => 0 ),
- array( 'db' => 'username', 'dt' => 1 ),
- array( 'db' => 'email_id', 'dt' => 2 ),
- array( 'db' => 'date', 'dt' => 3),
- array( 'db' => 'platform', 'dt' => 4 ),
- array( 'db' => 'ban', 'dt' => 5 ),
- array( 'db' => 'view', 'dt' => 6 ),
- array( 'db' => 'delete', 'dt' => 7)
+ array('db' => 'id', 'dt' => 0),
+ array('db' => 'username', 'dt' => 1),
+ array('db' => 'email_id', 'dt' => 2),
+ array('db' => 'date', 'dt' => 3),
+ array('db' => 'platform', 'dt' => 4),
+ array('db' => 'ban', 'dt' => 5),
+ array('db' => 'view', 'dt' => 6),
+ array('db' => 'delete', 'dt' => 7)
);
// SQL server connection information
$sql_details = array(
- 'user' => $dbuser,
- 'pass' => $dbpassword,
- 'db' => $dbname,
- 'host' => $dbhost
+ 'user' => $dbuser,
+ 'pass' => $dbpassword,
+ 'db' => $dbname,
+ 'host' => $dbhost
);
@@ -46,13 +46,13 @@ $sql_details = array(
* server-side, there is no need to edit below this line.
*/
-require( 'ssp.users.php' );
+require('ssp.users.php');
echo json_encode(
- SSP::simple( $_GET, $sql_details, $table, $primaryKey, $columns, $columns2 )
+ SSP::simple($_GET, $sql_details, $table, $primaryKey, $columns, $columns2)
);
-if($_SERVER['HTTP_X_REQUESTED_WITH'] != "XMLHttpRequest") {
+if ($_SERVER['HTTP_X_REQUESTED_WITH'] != "XMLHttpRequest") {
header("Location: http://ponepaste.org/SVOtaKqJZh4nT9Z");
die();
}
diff --git a/admin/common.php b/admin/common.php
index 271eea3..4a41497 100644
--- a/admin/common.php
+++ b/admin/common.php
@@ -15,7 +15,7 @@ function updateAdminHistory($conn) {
if ($row = $query->fetch()) {
$last_date = $row['last_date'];
- $last_ip = $row['ip'];
+ $last_ip = $row['ip'];
}
if ($last_ip !== $ip || $last_date !== $date) {
diff --git a/admin/configuration.php b/admin/configuration.php
index 44406a2..ded843d 100644
--- a/admin/configuration.php
+++ b/admin/configuration.php
@@ -17,53 +17,53 @@ require_once('common.php');
updateAdminHistory($conn);
-$query = $conn->query('SELECT * FROM site_info');
+$query = $conn->query('SELECT * FROM site_info');
if ($row = $query->fetch()) {
- $title = Trim($row['title']);
- $des = Trim($row['des']);
- $baseurl = Trim($row['baseurl']);
- $keyword = Trim($row['keyword']);
- $site_name = Trim($row['site_name']);
- $email = Trim($row['email']);
- $twit = Trim($row['twit']);
- $face = Trim($row['face']);
- $gplus = Trim($row['gplus']);
- $ga = Trim($row['ga']);
+ $title = Trim($row['title']);
+ $des = Trim($row['des']);
+ $baseurl = Trim($row['baseurl']);
+ $keyword = Trim($row['keyword']);
+ $site_name = Trim($row['site_name']);
+ $email = Trim($row['email']);
+ $twit = Trim($row['twit']);
+ $face = Trim($row['face']);
+ $gplus = Trim($row['gplus']);
+ $ga = Trim($row['ga']);
$additional_scripts = Trim($row['additional_scripts']);
}
-$query = "SELECT * FROM captcha WHERE id = '1'";
+$query = "SELECT * FROM captcha WHERE id = '1'";
$result = $conn->query('SELECT * FROM captcha WHERE id = 1');
if ($row = $result->fetch()) {
- $cap_e = $row['cap_e'];
- $mode = $row['mode'];
- $mul = $row['mul'];
- $allowed = $row['allowed'];
- $color = $row['color'];
- $recaptcha_sitekey = $row['recaptcha_sitekey'];
- $recaptcha_secretkey = $row['recaptcha_secretkey'];
+ $cap_e = $row['cap_e'];
+ $mode = $row['mode'];
+ $mul = $row['mul'];
+ $allowed = $row['allowed'];
+ $color = $row['color'];
+ $recaptcha_sitekey = $row['recaptcha_sitekey'];
+ $recaptcha_secretkey = $row['recaptcha_secretkey'];
}
$result = $conn->query("SELECT * FROM site_permissions WHERE id='1'");
if ($row = $result->fetch()) {
- $disableguest = Trim($row['disableguest']);
- $siteprivate = Trim($row['siteprivate']);
+ $disableguest = Trim($row['disableguest']);
+ $siteprivate = Trim($row['siteprivate']);
}
$result = $conn->query("SELECT * FROM mail WHERE id='1'");
if ($row = $result->fetch()) {
- $verification = Trim($row['verification']);
- $smtp_host = Trim($row['smtp_host']);
- $smtp_username = Trim($row['smtp_username']);
- $smtp_password = Trim($row['smtp_password']);
- $smtp_port = Trim($row['smtp_port']);
- $protocol = Trim($row['protocol']);
- $auth = Trim($row['auth']);
- $socket = Trim($row['socket']);
+ $verification = Trim($row['verification']);
+ $smtp_host = Trim($row['smtp_host']);
+ $smtp_username = Trim($row['smtp_username']);
+ $smtp_password = Trim($row['smtp_password']);
+ $smtp_port = Trim($row['smtp_port']);
+ $protocol = Trim($row['protocol']);
+ $auth = Trim($row['auth']);
+ $socket = Trim($row['socket']);
}
/* Update the configuration if necessary */
@@ -71,20 +71,20 @@ if ($row = $result->fetch()) {
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (isset($_POST['manage'])) {
$query = $conn->prepare(
- 'UPDATE site_info SET title = ?, des = ?, baseurl = ?, keyword = ?, site_name = ?, email = ?, twit = ?, face = ?, gplus = ?, ga = ?, additional_scripts = ? WHERE id = 1'
+ 'UPDATE site_info SET title = ?, des = ?, baseurl = ?, keyword = ?, site_name = ?, email = ?, twit = ?, face = ?, gplus = ?, ga = ?, additional_scripts = ? WHERE id = 1'
);
$query->execute([
- trim($_POST['title']),
- trim($_POST['des']),
- trim($_POST['baseurl']),
- trim($_POST['keyword']),
- trim($_POST['site_name']),
- trim($_POST['email']),
- trim($_POST['twit']),
- trim($_POST['face']),
- trim($_POST['gplus']),
- trim($_POST['ga']),
- trim($_POST['additional_scripts'])
+ trim($_POST['title']),
+ trim($_POST['des']),
+ trim($_POST['baseurl']),
+ trim($_POST['keyword']),
+ trim($_POST['site_name']),
+ trim($_POST['email']),
+ trim($_POST['twit']),
+ trim($_POST['face']),
+ trim($_POST['gplus']),
+ trim($_POST['ga']),
+ trim($_POST['additional_scripts'])
]);
$msg = '
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Manage Ads
+
+
+
@@ -94,7 +94,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (isset($_POST['cap'])) {
$query = $conn->prepare(
- 'UPDATE captcha SET cap_e = ?, mode = ?, mul = ?, allowed = ?, color = ?, recaptcha_sitekey = ?, recaptcha_secretkey = ? WHERE id = 1'
+ 'UPDATE captcha SET cap_e = ?, mode = ?, mul = ?, allowed = ?, color = ?, recaptcha_sitekey = ?, recaptcha_secretkey = ? WHERE id = 1'
);
$query->execute([
trim($_POST['cap_e']),
@@ -127,7 +127,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (isset($_POST['smtp_code'])) {
$query = $conn->prepare(
- 'UPDATE mail SET verification = ?, smtp_host = ?, smtp_port = ?, smtp_username = ?, smtp_password = ?, socket = ?, protocol = ?, auth = ? WHERE id = 1'
+ 'UPDATE mail SET verification = ?, smtp_host = ?, smtp_port = ?, smtp_username = ?, smtp_password = ?, socket = ?, protocol = ?, auth = ? WHERE id = 1'
);
$query->execute([
@@ -148,440 +148,495 @@ if (isset($_POST['smtp_code'])) {
-
-
-
+
+
+
Paste - Configuration
-
-
-
-
-
-
-
+
+
+
+ Paste
+
+
-
-
-
-
-
-
-
-
-
-
- Sample — CKEditor
-
+
+ Sample — CKEditor
+
-
-
+
-
+
+
+
+
+
+
+
-
+
-
-
-
+
+
+
\ No newline at end of file
diff --git a/admin/js/plugins/ckeditor/samples/assets/posteddata.php b/admin/js/plugins/ckeditor/samples/assets/posteddata.php
index 6654166..4fc5d2a 100644
--- a/admin/js/plugins/ckeditor/samples/assets/posteddata.php
+++ b/admin/js/plugins/ckeditor/samples/assets/posteddata.php
@@ -7,50 +7,54 @@ For licensing, see LICENSE.md or http://ckeditor.com/license
?>
-
-
-
-
-
-
+
+
+
+
-
-
+
-
-
+
-
-
+
+
diff --git a/admin/index.php b/admin/index.php
index edc8900..61fb36e 100644
--- a/admin/index.php
+++ b/admin/index.php
@@ -14,11 +14,11 @@
*/
// PHP <5.5 compatibility
-require_once('../includes/password.php');
+require_once('../includes/password.php');
session_start();
-require_once ('../config.php');
+require_once('../config.php');
$conn = new PDO(
"mysql:host=$db_host;dbname=$db_schema;charset=utf8",
@@ -27,73 +27,76 @@ $conn = new PDO(
$db_opts
);
-$query = $conn->query('SELECT user, pass FROM admin');
+$query = $conn->query('SELECT user, pass FROM admin');
while ($row = $query->fetch()) {
- $adminid = Trim($row['user']);
+ $adminid = Trim($row['user']);
$password = Trim($row['pass']);
}
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
- if ($adminid == htmlentities(trim($_POST['username']))) {
- if (password_verify($_POST['password'], $password)) {
- header("Location: dashboard.php");
- $_SESSION['login'] = true;
- } else {
- $msg = '-
-
- Site Info -
- Permissions -
- Captcha Settings -
- Mail Settings -
+ if ($adminid == htmlentities(trim($_POST['username']))) {
+ if (password_verify($_POST['password'], $password)) {
+ header("Location: dashboard.php");
+ $_SESSION['login'] = true;
+ } else {
+ $msg = '
+
-
-
-
-
Wrong User/Password
';
- }
- } else {
- $msg = '
+ }
+ } else {
+ $msg = 'Paste - Login
-
-
-
+
+
+
+
+ Paste - Login
+
+
+
- Paste - Interface
-
-
-
-
-
-
-
+
+
+
Wrong User/Password
';
-
- }
+
+ }
}
?>
-
-
-
-
-
-
-
+
\ No newline at end of file
diff --git a/admin/interface.php b/admin/interface.php
index 36077ba..a9054b1 100644
--- a/admin/interface.php
+++ b/admin/interface.php
@@ -24,14 +24,14 @@ if (isset($_SESSION['login'])) {
if (isset($_GET['logout'])) {
if (isset($_SESSION['login']))
unset($_SESSION['login']);
-
+
session_destroy();
header("Location: .");
exit();
}
$date = date('jS F Y');
-$ip = $_SERVER['REMOTE_ADDR'];
+$ip = $_SERVER['REMOTE_ADDR'];
require_once('../config.php');
$con = mysqli_connect($dbhost, $dbuser, $dbpassword, $dbname);
@@ -48,17 +48,17 @@ while ($row = mysqli_fetch_array($result)) {
$last_id = $row['@last_id := MAX(id)'];
}
-$query = "SELECT * FROM admin_history WHERE id=" . Trim($last_id);
+$query = "SELECT * FROM admin_history WHERE id=" . Trim($last_id);
$result = mysqli_query($con, $query);
while ($row = mysqli_fetch_array($result)) {
$last_date = $row['last_date'];
- $last_ip = $row['ip'];
+ $last_ip = $row['ip'];
}
if ($last_ip == $ip) {
if ($last_date == $date) {
-
+
} else {
$query = "INSERT INTO admin_history (last_date,ip) VALUES ('$date','$ip')";
mysqli_query($con, $query);
@@ -72,191 +72,193 @@ if ($last_ip == $ip) {
-
-
-
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/admin/ipbans.php b/admin/ipbans.php
index 0754f44..fa7ba04 100644
--- a/admin/ipbans.php
+++ b/admin/ipbans.php
@@ -24,14 +24,14 @@ if (isset($_SESSION['login'])) {
if (isset($_GET['logout'])) {
if (isset($_SESSION['login']))
unset($_SESSION['login']);
-
+
session_destroy();
header("Location: .");
exit();
}
$date = date('jS F Y');
-$ip = $_SERVER['REMOTE_ADDR'];
+$ip = $_SERVER['REMOTE_ADDR'];
require_once('../config.php');
$con = mysqli_connect($dbhost, $dbuser, $dbpassword, $dbname);
@@ -48,17 +48,17 @@ while ($row = mysqli_fetch_array($result)) {
$last_id = $row['@last_id := MAX(id)'];
}
-$query = "SELECT * FROM admin_history WHERE id=" . Trim($last_id);
+$query = "SELECT * FROM admin_history WHERE id=" . Trim($last_id);
$result = mysqli_query($con, $query);
while ($row = mysqli_fetch_array($result)) {
$last_date = $row['last_date'];
- $last_ip = $row['ip'];
+ $last_ip = $row['ip'];
}
if ($last_ip == $ip) {
if ($last_date == $date) {
-
+
} else {
$query = "INSERT INTO admin_history (last_date,ip) VALUES ('$date','$ip')";
mysqli_query($con, $query);
@@ -69,26 +69,26 @@ if ($last_ip == $ip) {
}
// Get IP from form or URL
-if ( $_SERVER['REQUEST_METHOD'] == 'POST' || isset( $_GET['banip'] ) ) {
- if ( isset( $_POST['banip'] ) ) {
- $ban_ip = htmlentities( Trim( $_POST['ban_ip'] ) );
- } elseif ( isset( $_GET['banip'] ) ) {
- $ban_ip = htmlentities( Trim( $_GET['banip'] ) );
+if ($_SERVER['REQUEST_METHOD'] == 'POST' || isset($_GET['banip'])) {
+ if (isset($_POST['banip'])) {
+ $ban_ip = htmlentities(Trim($_POST['ban_ip']));
+ } elseif (isset($_GET['banip'])) {
+ $ban_ip = htmlentities(Trim($_GET['banip']));
}
// Check if IP is blank or already banned.
- if ( trim($ban_ip) == '' ) {
- $msg = '
+ Paste
+
+
-
-
-
+
+
+
+
+
+
-
-
+
+
+
-
-
-
-
+
+
+
+
-
- -
-
- - Dashboard - -
- - Configuration - -
- - Interface - -
- - Admin Account - -
- - Pastes - -
- - Users - -
- - IP Bans - -
- - Statistics - -
- - Ads - -
- - Pages - -
- - Sitemap - -
- - Tasks - -
+
+
+
-
-
-
-
+
+
+
';
-
- } else {
- $msg = '
+
+
+
+
' . mysqli_error($con) . '
+
+ -
+
- + Dashboard + +
- + Configuration + +
- + Interface + +
- + Admin Account + +
- + Pastes + +
- + Users + +
- + IP Bans + +
- + Statistics + +
- + Ads + +
- + Pages + +
- + Sitemap + +
- + Tasks + +
+
+ } else {
+ $msg = '
+
Settings saved
';
- }
- }
- ?>
+ }
+ }
+ ?>
-
-
-
+
-
+
-
+
-
+
+
-
-
+
+ Please enter an IP to ban.
';
+ if (trim($ban_ip) == '') {
+ $msg = 'Please enter an IP to ban.
';
} else {
- $query = "SELECT * FROM ban_user where ip='$ban_ip'";
- $result = mysqli_query( $con, $query );
- $num_rows = mysqli_num_rows( $result );
- if ( $num_rows >= 1 ) {
+ $query = "SELECT * FROM ban_user where ip='$ban_ip'";
+ $result = mysqli_query($con, $query);
+ $num_rows = mysqli_num_rows($result);
+ if ($num_rows >= 1) {
$msg = '' . $ban_ip . ' already banned
';
} else {
// Valid IP which is not banned. Add to database
- $query = "INSERT INTO ban_user (last_date,ip) VALUES ('$date','$ban_ip')";
- mysqli_query( $con, $query );
- if ( mysqli_errno( $con ) ) {
+ $query = "INSERT INTO ban_user (last_date,ip) VALUES ('$date','$ban_ip')";
+ mysqli_query($con, $query);
+ if (mysqli_errno($con)) {
$msg = '' . mysqli_error($con) . '
';
} else {
$msg = '' . $ban_ip . ' added to the banlist
';
@@ -98,212 +98,213 @@ if ( $_SERVER['REQUEST_METHOD'] == 'POST' || isset( $_GET['banip'] ) ) {
}
if (isset($_GET{'delete'})) {
- $delete = htmlentities(Trim($_GET['delete']));
- $query = "DELETE FROM ban_user WHERE id=$delete";
- $result = mysqli_query($con, $query);
-
- if (mysqli_errno($con)) {
- $msg = '
+ $delete = htmlentities(Trim($_GET['delete']));
+ $query = "DELETE FROM ban_user WHERE id=$delete";
+ $result = mysqli_query($con, $query);
+
+ if (mysqli_errno($con)) {
+ $msg = 'Paste - IP Bans
-
-
-
-
-
-
-
+
+
' . mysqli_error($con) . '
';
- } else {
- $msg = '
+ } else {
+ $msg = '
IP removed from the banlist
';
- }
+ }
}
?>
-
-
-
+
+
+
+
+
+
+ Paste
+
+
-
-
-
+
-
-
-
+
-
-
-
-
-
-
- -
-
- - Dashboard - -
- - Configuration - -
- - Interface - -
- - Admin Account - -
- - Pastes - -
- - Users - -
- - IP Bans - -
- - Statistics - -
- - Ads - -
- - Pages - -
- - Sitemap - -
- - Tasks - -
-
-
-
-
-
-
-
-
- Ban an IP
-
-
-
-
-
-
-
-
-
-
-
-
-
';
- // Display pagination
- echo 'Previous ";
+ }
+ } elseif ($page == 0) {
+ echo @"Next ";
+ } elseif ($page > 0) {
+ $last = $page - 2;
+ echo @"Previous ";
+ echo @"Next ";
+ }
+ echo '';
+ ?>
-
- Banlist
- | Date Added | -IP | -Delete | -
|---|
| Date Added | +IP | +Delete | +' . $row['last_date'] . ' | '; + echo '' . $row['ip'] . ' | '; + $myid = $row['id']; + echo '' . " Delete " . ' | '; + $no++; + } + echo ''; + echo ''; + echo '
|---|
- ';
+ if ($left_rec < $rec_limit) {
+ $last = $page - 2;
+ if ($last < 0) {
- if (isset($_GET{'page'})) { // Current page
- $page = $_GET{'page'} + 1;
- $offset = $rec_limit * $page;
- } else {
- // Show first set of results
- $page = 0;
- $offset = 0;
- }
- $left_rec = $rec_count - ($page * $rec_limit);
- // Set the specific query to display in the table
- $sql = "SELECT * FROM ban_user ORDER BY `id` DESC LIMIT $offset, $rec_limit";
- $result = mysqli_query($con, $sql);
- $no = 1;
- // Loop through each records
- while ($row = mysqli_fetch_array($result)) {
- // Populate and display result data in each row
- echo '
- ';
- if ($left_rec < $rec_limit) {
- $last = $page - 2;
- if ($last < 0) {
-
- } else {
- echo @"
- Previous "; - } - } else if ($page == 0) { - echo @"
- Next "; - } else if ($page > 0) { - $last = $page - 2; - echo @"
- Previous "; - echo @"
- Next "; - } - echo '
- CKEditor — Posted Data -
-| Field Name | -Value | -
|---|
| Field Name | +Value | +
|---|---|
| - | - |
-
-
+ $value = htmlspecialchars((string)$value);
+ ?>
+ -
- CKEditor - The text editor for the Internet - http://ckeditor.com -
-- Copyright © 2003-2014, CKSource - Frederico Knabben. All rights reserved. -
-
+
+
diff --git a/admin/js/plugins/ckeditor/samples/sample_posteddata.php b/admin/js/plugins/ckeditor/samples/sample_posteddata.php
index 7637104..0657699 100644
--- a/admin/js/plugins/ckeditor/samples/sample_posteddata.php
+++ b/admin/js/plugins/ckeditor/samples/sample_posteddata.php
@@ -13,4 +13,5 @@
For licensing, see LICENSE.md or http://ckeditor.com/license
-------------------------------------------------------------------------------------------
-+
+ CKEditor - The text editor for the Internet - http://ckeditor.com +
++ Copyright © 2003-2014, CKSource - Frederico Knabben. All + rights reserved. +
+ */ include "assets/posteddata.php"; ?>
+