Система за вицове с категории + MySQL – Част Втора

Следващите файлове се намират в папка admin.

index.php

<?php session_start();

include('pro1.php');

$username = $_POST['username'];

$password = $_POST['password'];



?>



<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">

<html>

<head>

<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">

<title>Web-Journal - Links Indexing Admin Panel</title>

<style type="text/css">

<!--

body,td,th {

font-family: Verdana, Arial, Helvetica, sans-serif;

font-size: 10px;

color: #000000;

}

a:link {

color: #FF0000;

text-decoration: none;

}

a:visited {

text-decoration: none;

color: #FF0000;

}

a:hover {

text-decoration: underline;

color: #FF6600;

}

a:active {

text-decoration: none;

color: #FF6600;

}

a {

font-size: 10px;

}

-->

</style></head>



<body>

<table width="400" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#999999">

<tr>

<td><table width="400" border="0" align="center" cellpadding="0" cellspacing="0">

<tr>

<td><div align="center"><img src="../img/logo.gif"></div></td>

</tr>
<br>
<center>Административен панел</center>
<br>

<tr>

<td height="145">

<?php if($_POST['submit']){

if($username == $username2 && $password == $password2) {

session_register("username");

$_SESSION['username'] = $username;

echo "<font color=\"#ffffff\"><b>Thank you for login in, you will be redirected to the protected pages in 2 seconds <META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=pro.php\"></b></font>";

}

} ?>

<form name="form1" method="post" action="index.php">

Username:<br>

<input name="username" type="text" id="username">

<br>

Password: <br>

<input name="password" type="password" id="password">

<br>

<br>

<input name="submit" type="submit" id="submit" value="Login!">

<br>

<br>

</form></td>

</tr>

<tr>

<td><div align="center">Powered by <a href="http://webjo.to.md" target="_blank">Web-Journal</a></div></td>

</tr>

</table></td>

</tr>

</table>

</body>

</html>

addcat.php

<table width="100%" border=1>
<tr>
<td colspan="2">Добавени категории до момента</td>
</tr>

<?php


mysql_connect($server, $dbusername, $dbpassword)or die("Сайтът не може да се свърже към базата данни");
@mysql_select_db($db_name) or die("Грешна база данни");
$query="SELECT * FROM `kategorii` ORDER BY cats ASC";
$result=mysql_query($query);

$num=mysql_numrows($result);

mysql_close();

$i=0;
while ($i < $num) {

$cats=mysql_result($result,$i,"cats");
$id_cat=mysql_result($result,$i,"id_cat");

echo "<tr><td width=80%>$cats</td><td width=20%><a href=pro.php?page=del&id_cat=$id_cat>Изтрии</a></td></tr>";

$i++;
}

?>
</table>
<br>
<br>
<table border=0>
<form action=pro.php?page=addcat method=post name=form>
<tr>
<td>Категория</td>
<td><input name=cats type=text class=form size="50"></td>
</tr>
<tr>
<td> <br></td>
<td><input type=submit name=Submit value=Добави class=form></td>
</tr>
</table>
</form>

<?php


if($_POST['Submit']){


$cats = $_POST['cats'];



mysql_connect($server, $dbusername, $dbpassword)or die("Сайтът не може да се свърже към базата данни");
@mysql_select_db($db_name) or die("Грешна база данни");
$query = "INSERT INTO `kategorii` ( `id_cat` , `cats`)
VALUES (
'NULL', '$cats'
);";
$ok = mysql_query($query);
if($ok){
echo "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=pro.php?page=addcat\">";
}else{
echo "Възникна грешка";
}
};

?>

addvic.php

<?php
$back = $_SERVER['HTTP_REFERER'];

$id_vic = $_POST['id_vic'];

$potrebitel = $_POST['potrebitel'];
$vreme = $_POST['vreme'];
$vic = $_POST['vic'];
$email = $_POST['email'];
$id_cat = $_POST['id_cat'];
$ip = $_POST['ip'];
$status = "on";



mysql_connect($server, $dbusername, $dbpassword)or die("Сайтът не може да се свърже към базата данни");
@mysql_select_db($db_name) or die("Грешна база данни");
mysql_query ("UPDATE vicove SET id_cat='$id_cat', ip='$ip', potrebitel='$potrebitel', vreme='$vreme', vic='$vic', email='$email', status='$status' WHERE id_vic='$id_vic'");
$ok = mysql_query($query);
if(!$ok){
echo "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=$back\">";
}else{
echo "Възникна грешка";
};

?>

del.php

<?php

$back = $_SERVER['HTTP_REFERER'];

mysql_connect($server, $dbusername, $dbpassword)or die("Сайтът не може да се свърже към базата данни");
@mysql_select_db($db_name) or die("Грешна база данни");
$id_cat = $_GET['id_cat'];
if(isset($id_cat)){
$query1 = "delete from `kategorii` WHERE id_cat=$id_cat";
$result = mysql_query($query1);
}
$id_cat = $_GET['id_cat'];
if(isset($id_cat)){
$query1 = "delete from `vicove` WHERE id_cat=$id_cat";
$result = mysql_query($query1);
}

$ok = mysql_query($query1);
if($ok){
echo "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=$back\">";
}else{
echo "Възникна грешка";

};
?>

home.php

Добре дошъл в администраторския панел.

log.php

<?php

session_start();
header("Cache-control: private");

?>
<html>
<head>
<title>logout</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">
<LINK REL="STYLESHEET" TYPE="text/css">
</head>
<body topmargin="0" leftmargin="0" marginheight="0" marginwidth="0">

<?php
if(!$_SESSION['username']){
echo "Ти не си влязъл!"; // Това се показва когато не си влязъл
} else {

$_SESSION['username'] = FALSE;
echo "Ти излезна успешно";

}
?>
</body>
</html>

pro.php

<?php

session_start();

if(!$_SESSION['username']){

echo "Please <a href=index.php>login.</a>";

exit;

}

?>

<?php include ("../config.php"); ?>

<!--
Webjo jooorooo@data.bg
-->


<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">
<title>Admin panel</title>
</script>

</head>

<body>
<center>
<table border="1" cellpadding="0" cellspacing="0" bordercolor="#111111" width="950">
<tr>
<td valign=top width="22%">
<a href=pro.php?page=home>Начало</a><br><a href=pro.php?page=view>Чакащ виц</a><br>
<a href=pro.php?page=addcat>Добави категория</a><br><a href=log.php>Изход</a><br>
</td>
<td valign=top width="78%">
<?php

switch ($HTTP_GET_VARS[page]) {


default:

include "home.php";

break;



case 'view':

include 'view.php';

break;


case 'addvic':

include 'addvic.php';

break;



case 'addcat':

include 'addcat.php';

break;


case 'del':

include 'del.php';

break;

}

?>
</td>
</tr>
</table>
</center>
</body>
</html>

pro1.php

<?php $username2 = "admin"; // Your Username
$password2 = "admin"; // Your Password ?>

view.php

<table width="100%" border="1">
<?php


mysql_connect($server, $dbusername, $dbpassword)or die("Сайтът не може да се свърже към базата данни");
@mysql_select_db($db_name) or die("Грешна база данни");
$query="SELECT * FROM vicove WHERE status='off' ORDER BY id_vic ASC";
$result=mysql_query($query);

$num=mysql_numrows($result);

mysql_close();

$i=0;
while ($i < $num) {

$potrebitel=mysql_result($result,$i,"potrebitel");
$vreme=mysql_result($result,$i,"vreme");
$vic=mysql_result($result,$i,"vic");
$email=mysql_result($result,$i,"email");
$id_vic=mysql_result($result,$i,"id_vic");
$id_cat=mysql_result($result,$i,"id_cat");
$ip=mysql_result($result,$i,"ip");

?>

<tr>
<form method="POST" action="pro.php?page=addvic&id_vic=<?php echo id_vic; ?>">
<input type=hidden value=<?php echo $id_vic; ?> name=id_vic>
<input type=hidden value=<?php echo $ip; ?> name=ip>
<input type=hidden value=<?php echo $potrebitel; ?> name=potrebitel>
<input type=hidden value=<?php echo $vreme; ?> name=vreme>
<input type=hidden value=<?php echo $vic; ?> name=vic>
<input type=hidden value=<?php echo $email; ?> name=email>
<input type=hidden value=<?php echo $id_cat; ?> name=id_cat>
<td width="50%"> Добавил: <a href="mailto:<?php echo $email; ?>"><?php echo $potrebitel; ?></a></td>
<td width="50%"> Дата:<?php echo $vreme; ?></td>
<td width="50%"> Добавяне <input type="submit" value="ok" name="B1"></td>
</tr>
<tr>
<td align="justify" width="100%" colspan="3"><?php echo $vic; ?> </td>
</tr>
<tr>
<td width="100%" colspan="3"> </td>
</tr>
</form>
<?php
$i++;
}

?>
<table>

Ако на някои не му е ясно нещо или има въпроси, може да се свържe с мен във форума или на ЛС.