Make admin dashboard work again.

This commit is contained in:
Floorb 2021-08-13 16:54:06 -04:00
parent e7ad8bdde1
commit 855c7f7db3
3 changed files with 14 additions and 33 deletions

View file

@ -169,20 +169,18 @@ for ($loop = 0; $loop <= 6; $loop++) {
foreach ($res as $row) { foreach ($res as $row) {
$title = Trim($row['title']); $title = Trim($row['title']);
$p_id = Trim($row['id']); $p_id = Trim($row['id']);
$p_date = $row['date']->format('jS F Y h:i:s A'); $p_date = new DateTime($row['created_at']);
$p_date_formatted = $p_date->format('jS F Y h:i:s A');
$p_ip = Trim($row['ip']); $p_ip = Trim($row['ip']);
$p_member = Trim($row['member']); $p_member = Trim($row['member']);
$p_view = Trim($row['views']); $p_view = Trim($row['views']);
$p_time = Trim($row['now_time']); $p_time = friendlyDateDifference($p_date, new DateTime());
$nowtime1 = time();
$oldtime1 = $p_time;
$p_time = conTime($nowtime1 - $oldtime1);
$title = truncate($title, 5, 30); $title = truncate($title, 5, 30);
echo " echo "
<tr> <tr>
<td>$p_id</td> <td>$p_id</td>
<td>$p_member</td> <td>$p_member</td>
<td>$p_date</td> <td>$p_date_formatted</td>
<td><span class='label label-default'>$p_ip</span></td> <td><span class='label label-default'>$p_ip</span></td>
<td>$p_view</td> <td>$p_view</td>
</tr> "; </tr> ";

View file

@ -12,39 +12,22 @@
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License in GPL.txt for more details. * GNU General Public License in GPL.txt for more details.
*/ */
session_start(); define('IN_PONEPASTE', 1);
require_once(__DIR__ . '/../includes/common.php');
require_once('../includes/config.php'); $row = $conn->querySelectOne('SELECT user, pass FROM admin LIMIT 1');
$adminid = $row['user'];
$conn = new PDO( $password = $row['pass'];
"mysql:host=$db_host;dbname=$db_schema;charset=utf8",
$db_user,
$db_pass,
$db_opts
);
$query = $conn->query('SELECT user, pass FROM admin');
while ($row = $query->fetch()) {
$adminid = Trim($row['user']);
$password = Trim($row['pass']);
}
if ($_SERVER['REQUEST_METHOD'] == 'POST') { if ($_SERVER['REQUEST_METHOD'] == 'POST') {
if ($adminid == htmlentities(trim($_POST['username']))) { if ($adminid === trim($_POST['username']) && password_verify($_POST['password'], $password)) {
if (password_verify($_POST['password'], $password)) { $_SESSION['login'] = true;
header("Location: dashboard.php"); header("Location: dashboard.php");
$_SESSION['login'] = true; exit();
} else {
$msg = '<div class="paste-alert alert6" style="text-align:center;">
Wrong User/Password
</div>';
}
} else { } else {
$msg = '<div class="paste-alert alert6" style="text-align:center;"> $msg = '<div class="paste-alert alert6" style="text-align:center;">
Wrong User/Password Wrong User/Password
</div>'; </div>';
} }
} }
?> ?>

View file

@ -212,7 +212,7 @@ if ($p_password == "NONE" || $p_password === null) {
// View counter // View counter
if ($_SESSION['not_unique'] !== $paste_id) { if (@$_SESSION['not_unique'] !== $paste_id) {
$_SESSION['not_unique'] = $paste_id; $_SESSION['not_unique'] = $paste_id;
$conn->query("UPDATE pastes SET views = (views + 1) where id = ?", [$paste_id]); $conn->query("UPDATE pastes SET views = (views + 1) where id = ?", [$paste_id]);
} }