Her er koden, den er bare pastet og paste...
<?php
require('tjeklogin.php');
?>
<!--
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk->
<script type="text/javascript">
<!-- Dette script og mange flere -->
<!-- findes hos
http://www.html.dk -->
<!-- Start
function validering()
{
error = 0;
if((document.forms[0].overskrift.value=='') && (error==0))
{
alert('Tekstfeltet skal udfyldes!');
document.forms[0].overskrift.focus();
error = 1;
}
if(error == 0)
document.forms[0].submit();
}
// Slut -->
</script>
<b>Status:</b> <?php echo $_SESSION['Status']; ?><br />
<div class="overskrift">Tilføj nyhed</div><br />
<a href="newuser.php" title="Opret ny bruger">Opret ny bruger</a> | <a href="logud.php" title="Log ud">Log ud</a><br />
<form name="addnew" method="post" action="addpost.php" onsubmit="validering();return false;">
<div class="addtitle">Overskrift:</div><input class="input" type="text" name="overskrift" value="Overskrift indtastes her" size="20" maxlength="40" onfocus="this.select()"><br>
<div class="addtitle">Tekst:</div><textarea class="input" cols="40" rows="4" name="text" onfocus="this.select()">Tekst indtastes her</textarea><br>
<div class="addtitle"></div><input class="input" type="submit" name="submit" value="Tilføj">
</form>
<?php
include('admin_inc.php');
?>
</div></div></div>
<?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
include('include.php');
mysql_select_db($database, $db);
$overskrift = addslashes($_POST['overskrift']);
$text = addslashes($_POST['text']);
$id = $_POST['id'];
if ($overskrift != 'Overskrift indtastes her') {
$overskrift = $overskrift;
} else {
$overskrift = $default_titel;
}
$sSQL = "INSERT INTO `news` (`id`, `overskrift`, `dato`, `text`) VALUES ('', '$overskrift', '".time()."', '$text');";
mysql_query($sSQL);
$overskrift = stripslashes($overskrift);
$text = stripslashes($text);
header("location: news.php");
?>
<?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
include('include.php');
mysql_select_db($database, $db) or die ("Kunne ikke finde db'en");
$newpassword = md5($newpassword);
$uSQL = "INSERT INTO `users` (`id`, `navn`, `password`) VALUES ('', '$newusername', '$newpassword');";
mysql_query($uSQL);
header("location: newuser.php");
?><?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
include('include.php');
include('tagster_lib.php');
mysql_select_db($database, $db);
$res = mysql_query("select id, overskrift from news where status = '1' order by id desc");
while($data = mysql_fetch_array($res)){
echo "<a href='?id=".$data['id']."'>".stripslashes($data['overskrift'])."</a> | <a href=\"del.php?id=".$data['id']."\">Slet</a><br>";
}
echo "<br>";
if ($id) {
$result = mysql_query("SELECT DISTINCT text FROM news WHERE id = '$id'");
while ($stam = mysql_fetch_array($result)) {
echo tagster_format(stripslashes(trim($stam[text])));
}
}
mysql_close();
?>
<?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
require('tjeklogin.php');
if($_SESSION['Status'] != 'admin') {
echo "Sorry, no can do!";
} else {
include('include.php');
mysql_select_db($database, $db) or die ("Kunne ikke finde db'en");
$seSQL = "select * from users where id = $id";
$data = mysql_query($seSQL);
$var = mysql_fetch_Array($data);
$bruger = $var["navn"];
?>
<!--
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dkemail: exp@firewerx.dk
->
<div class="overskrift">Change Password</div><br />
<a href="newuser.php" title="Opret ny bruger">Tilbage</a> | <a href="logud.php" title="Log ud">Log ud</a><br />
<form name="chpwd" method="post" action="pwd.php">
<input type="hidden" name="id" value="<?php echo $id; ?>">
<input type="hidden" name="chusername" value="<?php echo $bruger; ?>">
<div class="addtitle">Brugernavn:</div><?php echo $bruger; ?><br />
<div class="addtitle">Password:</div><input type="text" name="chpassword"><br>
<div class="addtitle"></div><input class="input" type="submit" name="submit" value="Opdatér">
</form>
<?php
}
?><?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
include('include.php');
$id = $_GET['id'];
mysql_select_db($database, $db);
$del = "update news set status = 0 where id = $id";
mysql_query($del);
header('location:add.php');
?>
<?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
include('include.php');
$id = $_GET['id'];
mysql_select_db($database, $db);
$del = "delete from users where id = $id";
mysql_query($del);
header('location:newuser.php');
?>
<?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
session_start();
include('include.php');
//hvis form er submittet
if (isset($_POST['logind'])) {
//password i databasen er krypteret, så det gøres også med indtastet password
$dopass = md5($_POST['password']);
//skift selv bruger og pass til databasen.
$db = mysql_connect($server, $username, $password) or die ("Desværre ingen forbindelse til databasen");
mysql_select_db($database, $db) or die ("Kunne ikke vælge databasetabel");
$tjek = mysql_query("SELECT navn, password, status FROM users WHERE navn='$_POST[navn]' AND password='$dopass'") or die ("Kunne ikke vælge felter i database-tabellen");
if(mysql_num_rows($tjek) != 0) {
$var = mysql_fetch_Array($tjek);
$status = $var["status"];
$_SESSION['sessionnr'] = session_id();
$_SESSION['Name'] = $_POST['navn'];
$_SESSION['Status'] = $status;
header("Location:add.php");
exit;
}else{
header("Location:logind.php?error=fejl");
exit;
}
}else{
header("Location:logind.php");
exit;
}
?>
<?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
// Connection data
$server = 'din_server';
$username = 'dit_brugernavn';
$password = 'dit_password';
$database = 'database_navn';
$db = mysql_connect($server, $username, $password) or die(mysql_error("Cannot connect to database"));
// Antal poster vist
$numofposts = '5';
//Default titel-tekst
$default_titel = 'Så er der nyheder!';
?>
<?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
header("location:add.php");
?><html><head><title>Log ind med php og mysql</title></head>
<body marginwidth="100" leftmargin="100">
<!--
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk->
<form action="dologin.php" method="post">
<input type="hidden" name="logind" value="logind">
<p><b>Indtast:</b></p>
Brugernavn:<br>
<input type="text" name="navn"><br>
Password:<br>
<input type="password" name="password"><br>
<input type="submit" name="submit" value="Log ind">
</form>
<?php
if (isset($_GET['error']) && $_GET['error'] == "fejl") {
echo"<b>Fejl i brugernavn eller password!</b>";
}
?>
</body></html>
<?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
session_start();
$_SESSION = array();
session_destroy();
header("Location:logind.php");
exit;
?><html>
<head><title>exp's simple nyhedssystem</title></head>
<body>
<!--
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk->
<?php
include('include.php');
include('tagster_lib.php');
mysql_select_db($database, $db);
echo "<hr>";
$res = mysql_query("select overskrift, text from news where status = '1' order by id desc limit ".$numofposts);
while($data = mysql_fetch_array($res)){
echo "<b>".stripslashes(trim(nl2br($data['overskrift'])))."</b><br>".tagster_format(stripslashes(trim($data[text])))."<hr>";
}
mysql_close();
?>
</body></html>
#
# Newsscript by Michael Kjeldsen aka exp
# website:
www.firewerx.dk#
#
# Struktur dump for tabellen `news`
#
DROP TABLE IF EXISTS `news`;
CREATE TABLE `news` (
`id` int(11) NOT NULL auto_increment,
`dato` tinytext NOT NULL,
`overskrift` text NOT NULL,
`text` text NOT NULL,
`status` int(1) NOT NULL default '1',
PRIMARY KEY (`id`)
) TYPE=MyISAM;
#
# Data dump for tabellen `news`
#
INSERT INTO `news` (`id`, `dato`, `overskrift`, `text`, `status`) VALUES (1, '1044397412', 'Så er der nyheder!', 'Der kan let tilføjes nye funktioner, fx smilies o.lign.\r\n\r\nFx konverteres indtastede url\\\'s og emailadresser til klikbare links :o)\r\n\r\nLæs readme.txt for flere detaljer!\r\n\r\nVenligst\r\nexp\r\nwww.firewerx.dk\r\nexp@firewerx.dk', 1);
#
# Struktur dump for tabellen `brugere`
#
CREATE TABLE users (
id tinyint(4) NOT NULL auto_increment,
navn varchar(12) NOT NULL default '',
password tinytext NOT NULL,
status int(1) NOT NULL default 0,
PRIMARY KEY (id)
) TYPE=MyISAM;
#
# Data dump for tabellen `users`
#
INSERT INTO users VALUES (1, 'admin', md5('admin'));<?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
require('tjeklogin.php');
if ($_SESSION['Status'] != 'admin') {
echo $_SESSION['Status'];
echo "<br />Du kan ikke oprette brugere.<br />Kontakt admin for hjælp.<br /><br /><a href=\"add.php\">Tilbage</a>";
} else {
include('include.php');
mysql_select_db($database, $db);
$res = mysql_query("select id, navn from users order by id asc");
while($data = mysql_fetch_array($res)){
if ($_SESSION['Status'] == 'admin') {
$stat = 'a';
} elseif ($_SESSION['Status'] == 'coadmin') {
$stat = 'c';
}
echo $data['navn']."(".$stat.") | <a href=\"delu.php?id=".$data['id']."\">Slet bruger</a> | <a href=\"chpwd.php?id=".$data['id']."\">Change PWD</a><br />";
}
?>
<!--
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dkemail: exp@firewerx.dk
->
<hr>
<div class="overskrift">Tilføj bruger</div><br />
<a href="logud.php" title="Log ud">Log ud</a><br />
<form name="addnew" method="post" action="adduser.php">
<div class="addtitle">Brugernavn:</div><input class="input" type="text" name="newusername" value="Brugernavn indtastes her" size="20" maxlength="20" onfocus="this.select()"><br>
<div class="addtitle">Password:</div><input class="input" type="text" name="newpassword" value="Password indtastes her" onfocus="this.select()"><br>
<div class="addtitle"></div><input class="input" type="submit" name="submit" value="Tilføj">
</form>
<?php
}
?><?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
include('tjeklogin.php');
include('include.php');
mysql_select_db($database, $db) or die ("Kunne ikke finde db'en");
// echo "pass: ".$chpassword."<br />";
$password = md5($chpassword);
// echo "user: ".$username."<br />";
// echo "pass2: ".$password;
$pSQL = "UPDATE `users` SET `password` = '$password' WHERE `id` = '$id' LIMIT 1;";
mysql_query($pSQL);
header("location: newuser.php");
?>Copyright notice:
Dette script er 100% opensource, det eneste krav jeg stiller er, at der ikke ændres i headeren:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dkOm modulet:
systemet er opbygget omkring en række php-filer, der alle kan includeres - eneste umiddelbare krav er, at alle filer ligger i samme bibliotek. (Dette kan dog let ændres, med lidt snilde!)
Check efter opdateringer på
www.firewerx.dk/www/Filerne:
add.php : Siden du indtaster nyhederne på, passwordbeskyttet. (Back-end)
addpost.php : Filen der indsætter de indtastede data.
admin_inc.php : Filen der includerer oversigten + slet-funktionen i add.php.
del.php : Filen der udfører slet-kommandoen. (Indlæggene slettes ikke, de fjernes bare fra online-listen)
include.php : Konfigurationsfil, eneste fil du som udgangspunkt skal redigere i. Tilpasses dit webhotel.
news.php : Forside-filen med nyhederne. (Front-end)
tagster_lib.php : Funktionsfil, der omdanner indtastede url's og emailadresser til klikbare links. (Se fil for yderligere detaljer. Distribueres med tilladelse fra Lars Jensen [
www.ljweb.biz])
news.sql : Databasestruktur til nyhedssystemet
Om programmøren:
Se
www.firewerx.dk for yderligere detaljer.
Kontakt: exp@firewerx.dk<?php
/*
File : tagster_lib.php
Version : 2.2
Date : 18. april 2002
Author : Lars B. Jensen, lars.jensen@eug.dk
Module Description
Module to transform URL and E-Mail addresses into clickable links.
Note
This module library has support for the special scandinavian specialchars æ, ø and å.
Public Functions
--------------------------------------------------------------´
function tagster_format($str)
function tagster_url($str, $target, $class)
function tagster_email($str, $class)
Private Functions
--------------------------------------------------------------´
function tagster_fix_endchar($str)
function tagster_expand($str)
function tagster_reduce($str)
*/
function tagster_format($str, $target="_blank", $css_class="") {
$str = str_replace("&", "&", $str);
$str = str_replace("<", "<", $str);
$str = str_replace(">", ">", $str);
$str = tagster_url($str, $target, $css_class);
$str = tagster_email($str, $css_class);
$str = tagster_fix_endchar($str);
$str = str_replace(" ", " ", $str);
$str = str_replace("\t", " ", $str);
$str = str_replace("\r", "", $str);
$str = str_replace("\n", "<br>", $str);
return $str;
}
function tagster_url($str, $target, $css_class) {
$ins_str = "";
if ($css_class) $ins_str .= " class=\"".$css_class."\"";
if ($target) $ins_str .= " target=\"".$target."\"";
$str = tagster_expand($str);
$str = preg_replace ("/(ftp|http|https|telnet|news|nntp|file|irc):\/\/([a-z0-9~#%@&:;=!',_æøå\(\)\?\/\.\-\+\[\]\|\*\$\^\{\}]+)/i", "<a href=\"\\1://\\2\"".$ins_str.">\\1://\\2</a>", $str);
$str = preg_replace ("/(\s|tp\:|\(\[)(www\.)([a-z0-9~#%@&:;=!',_æøå\(\)\?\/\.\-\+\[\]\|\*\$\^\{\}]+)/i", "\\1<a href=\"
http://\\2\\3\"".$ins_str.">\\2\\3</a>", $str);
$str = preg_replace ("/(\s|tp\:|\(\[)(ftp\.)([a-z0-9~#%@&:;=!',_æøå\(\)\?\/\.\-\+\[\]\|\*\$\^\{\}]+)/i", "\\1<a href=\"
ftp://\\2\\3\"".$ins_str.">\\2\\3</a>", $str);
return tagster_reduce($str);
}
function tagster_email($str, $css_class="") {
$ins_class = "";
if ($css_class) $ins_class = " class=\"".$css_class."\"";
$str = tagster_expand($str);
$str = preg_replace ("/([\s|\"])([\w|\.|\-|_]+)@([\w||\-|_]+)\.([\w|\.|\-|_]+)/i", "\\1<a href=\"mailto:\\2@\\3.\\4\"".$ins_class.">\\2@\\3.\\4</a>", $str);
return tagster_reduce($str);
}
function tagster_fix_endchar($str) {
$str = preg_replace ("/([\'\"\)\]\.\,\?\!]+)\">/i", "\">", $str);
$str = preg_replace ("/([\'\"\)\]\.\,\?\!]+)\" (target|class)=\"/i", "\" \\2=\"", $str);
$str = preg_replace ("/([\'\"\)\]\.\,\?\!]+)<\/a>/i", "</a>\\1", $str);
return $str;
}
function tagster_expand($str) {
return " ".$str." ";
}
function tagster_reduce($str) {
return substr($str, 1, -1);
}
?>
<?php
/*
Copyright notice:
Newsscript by Michael Kjeldsen aka exp
website:
www.firewerx.dk */
session_start();
if (!isset($_SESSION['Name'], $_SESSION['sessionnr']) || $_SESSION['sessionnr'] != session_id()) {
header("Location:logind.php");
}
?>