helle koden ser sådan her ud.
<?
require("config.php");
mysql_connect($dbhost, $dbuser, $dbpass);
mysql_select_db($database);
// <----------------------------------- HER STARTER UNBAN_IP ----------------------------------->
if ($action == "unban_ip"){
if ($HTTP_POST_VARS[nick] == $admin_nick && $HTTP_POST_VARS[pass] == $admin_pass) {
MYSQL_QUERY("DELETE from banlist WHERE ip='$HTTP_POST_VARS[ip]'");
print "Brugeren med IP'en $HTTP_POST_VARS[ip] er ikke længere banned!";
}
}
// <----------------------------------- HER SLUTTER UNBAN_IP----------------------------------->
// <----------------------------------- HER STARTER BAN_IP ----------------------------------->
elseif ($action == "ban_ip"){
if ($HTTP_POST_VARS[nick] == $admin_nick && $HTTP_POST_VARS[pass] == $admin_pass) {
MYSQL_QUERY("INSERT INTO banlist (ip) VALUES('$HTTP_POST_VARS[ip]')");
print "Brugeren med IP'en $HTTP_POST_VARS[ip] er blevet banned!";
}
exit;
}
// <----------------------------------- HER SLUTTER BAN_IP----------------------------------->
// <----------------------------------- HER TJEKKER DEN OM MAN ER BANNED ----------------------------------->
$ip = $REMOTE_ADDR;
$res_ban = mysql_query("SELECT * FROM banlist WHERE ip = '$ip'") or die(mysql_error());
if (mysql_num_rows($res_ban)) { ?>
Sorry - du er banned :o( - kontakt webmasteren! <? ; }
else {
// <----------------------------------- HER SLUTTER BAN-TJEK ----------------------------------->
// <----------------------------------- HER STARTER ADMIN_LOGIN----------------------------------->
if ($action == "admin_login") { ?>
<form method="post" action="<? print"$PHP_SELF"; ?>" target="_self">
<input type="hidden" name="action" value="admin_option">
Admin brugernavn : <input type="text" name="nick" maxlength=16 value=""><br>
Admin kode : <input type="password" name="pass" maxlength=16 value=""><br>
<input type="submit" value="Login"></form><?
}
// <----------------------------------- HER SLUTTER ADMIN_LOGIN ----------------------------------->
// HELE ADMIN MODUL STARTER HER - LIGE PÅ NÆSTE LINIE
// <----------------------------------- HER STARTER ADMIN_OPTION----------------------------------->
if ($nick == $admin_nick && $pass == $admin_pass) { // admin-tjek starter
if ($action == "admin_option"){
if ($admin_action == "slet"){
mysql_query("DELETE from $tabel WHERE id='$HTTP_POST_VARS[id]'");
print "Nyheden er blevet slettet";
}
if ($admin_action == "slet_alle"){
mysql_query("DELETE from $tabel");
print "Databasen er tømt!";
}
if ($admin_action == "ret_nyhed"){
mysql_query("UPDATE $tabel SET nick='$HTTP_POST_VARS[navn]', email='$HTTP_POST_VARS[email]', resume='$HTTP_POST_VARS[resume]', nyhed='$HTTP_POST_VARS[nyhed]', tid='$tid' WHERE id='$id'") or die (mysql_error());;
print "Nyheden er blevet opdateret!";
}
if ($admin_action == "ret"){
$res = mysql_query("SELECT * from $tabel WHERE id='$HTTP_POST_VARS[id]'");
$row = mysql_fetch_array($res);
include("ret_skabelon.php3");
}
else{
?>
<table width="100%" border="0" height="8">
<tr>
<td width="46%">
<form method="post" action="<? print"$PHP_SELF"; ?>" target="_self">
<div align="center">
<input type="hidden" name="action" value="skriv">
<input type="hidden" name="nick" value="<?print "$nick";?>">
<input type="hidden" name="pass" value="<?print "$pass";?>">
<input type="submit" value="Tilføj nyhed" name="submit2">
</div>
</form></td>
<td width="54%">
<form method="post" action="<? print"$PHP_SELF"; ?>" target="_self">
<div align="center">
<input type="hidden" name="action" value="admin_option">
<input type="hidden" name="admin_action" value="slet_alle">
<input type="hidden" name="nick" value="<?print "$nick";?>">
<input type="hidden" name="pass" value="<?print "$pass";?>">
<input type="submit" value="Tøm databasen" name="submit">
</div>
</form>
</td>
</tr>
</table>
<?
include("admin_skabelon.php3");
}
}
// <----------------------------------- HER SLUTTER ADMIN_OPTION ----------------------------------->
// <----------------------------------- HER STARTER TILFOEJ_NYHED ----------------------------------->
elseif ($action == "tilfoej_nyhed"){
$nick = $HTTP_POST_VARS[nick];
$email = $HTTP_POST_VARS[email];
$titel = $HTTP_POST_VARS[titel];
$resume = $HTTP_POST_VARS[resume];
$nyhed = $HTTP_POST_VARS[nyhed];
$cat = $HTTP_POST_VARS[cat];
$ip = $HTTP_POST_VARS[ip];
if ($nick == ""){
print " Du mangler at udfylde dit navn!<br>";
}
if ($email == ""){
print " Du mangler at udfylde din email adresse!<br>";
}
if ($titel == ""){
print " Du mangler at udfylde titel-feltet!<br>";
}
if ($resume == ""){
print " Du mangler at udfylde resumé-feltet!<br>";
}
if ($nyhed == ""){
print " Du mangler at udfylde nyheds-feltet!<br>";
}
if ($nick != "" && $email != "" && $titel != "" && $resume != "" && $cat != "") {
mysql_query("INSERT INTO $tabel (nick, titel, resume, nyhed, cat, email, ip)
VALUES('$nick', '$titel', '$resume', '$nyhed', '$cat', '$email', '$ip')") or die (mysql_error()); ;
print "Din nyhed er blevet tilføjet.";?>
<br>
<form method="post" action="<? print"$PHP_SELF"; ?>" target="_self">
<input type="hidden" name="action" value="alle">
<input type="submit" value="Gå til databasen"></form><?
}
}
// <----------------------------------- HER SLUTTER TILFOEJ_NYHED ----------------------------------->
// <----------------------------------- HER STARTER SKRIV ----------------------------------->
elseif ($action == "skriv"){ ?>
<form method="post" action="<? print"$PHP_SELF"; ?>" target="_self">
Dit navn: <input type="text" name="nick" maxlength=16 value=""><br>
Din email adresse: <input type="text" name="email" maxlength=40 value=""><br>
Titel: <input type="text" name="titel" maxlength=20 value=""><br>
Hvilken kategori passer nyheden bedst under :
<SELECT name="cat">
<option value="indland">Indland</option">
<option value="udland">Udland</option">
<option value="it">IT</option">
<option value="erhverv">Erhverv</option">
<option value="sport">Sport</option">
<option value="kultur">Kultur</option">
<option value="internet">Internet</option">
<option value="chat">Chat</option">
</select> <br>
<center>Skriv et resumé: <br> <textarea rows="10" name="resume" cols="40"></textarea><br>
Selve nyheden: <br> <textarea rows="10" name="nyhed" cols="40"></textarea><br></cemter>
<input type="hidden" name="action" value="tilfoej_nyhed">
<input type="hidden" name="nick" value="<? print"$nick";?>">
<input type="hidden" name="pass" value="<? print"$pass";?>">
<input type="hidden" name="ip" value="<? print "$REMOTE_ADDR";?>">
<input type="submit" value="Tilføj nyhed">
</form>
<br>
<br>
<?
}
}
} // her slutter det med admin tjek!
// <----------------------------------- HER SLUTTER SKRIV ----------------------------------->
// <----------------------------------- HER STARTER ALLE ----------------------------------->
if ($action == "alle"){ ?>
<center>
<a href="<? print "$PHP_SELF?action=alle&cat=indland"; ?>">Indland</a>
<a href="<? print "$PHP_SELF?action=alle&cat=udland"; ?>">Udland</a>
<a href="<? print "$PHP_SELF?action=alle&cat=it"; ?>">Computer & IT</a>
<a href="<? print "$PHP_SELF?action=alle&cat=erhverv"; ?>">Erhverv</a>
<a href="<? print "$PHP_SELF?action=alle&cat=sport"; ?>">sport</a>
<a href="<? print "$PHP_SELF?action=alle&cat=kultur"; ?>">kultur</a>
<a href="<? print "$PHP_SELF?action=alle&cat=internet"; ?>">Internet</a>
<a href="<? print "$PHP_SELF?action=alle&cat=chat"; ?>">Chat</a>
</center>
<?
$res = mysql_query("SELECT * FROM $tabel");
$tal = mysql_num_rows($res);
if ($tal == "1") {
print "Der er i øjeblikket 1 nyhed i databasen";
}
elseif ($tal == "0") {
print "Ingen nyheder er i databasen! :(";
}
else {
print "Der er i øjeblikket $tal nyheder i databasen";
}
if ($cat){
$res = mysql_query("SELECT * FROM $tabel where cat = '$cat' ORDER BY id DESC");
while($row = mysql_fetch_array($res)) {
include("skabelon.php3");
} // slut på WHILE løkken
} // slut på "cat" løkken
if (!isset($cat)){
$res = mysql_query("SELECT * FROM $tabel ORDER BY id DESC");
while($row = mysql_fetch_array($res)) {
include("skabelon.php3");
} // slut på WHILE løkken
} // slut på "cat" løkken
}
// <----------------------------------- HER SLUTTER ALLE ----------------------------------->
elseif ($action == "laes_nyhed"){
$res = mysql_query("SELECT * from $tabel WHERE id='$id'");
$row = mysql_fetch_array($res);
include("laes_skabelon.php3");
}
// <----------------------------------- HER STARTER INFOSIDEN ----------------------------------->
elseif ($action == "") {
print "
<left><b>JWNews 1.0 PHP</b><br><br>
<b>Ting man kan :</b><br>
- Det er muligt at tilføje nyheder.<br>
- Det er muligt at fjerne nyheder.<br>
- Det er muligt at rette nyheder.<br>
- Mulighed for at slette hele tabellen på 1 gang.<br>
- Nyhederne er opdelt i sektioner (kategorier)
<br>
<br>
<br>
Demo: <a href=\"
http://www.web-zone.dk/script/php/jwnews\"> HER </a><br>
Download: <a href=\"
http://www.web-zone.dk/script/php/jwnewsphp.zip\"> HER </a><br>
</left>
<br>Standard bruger og kode til admin er 1234 / 1234!<br><br>
";}
// <----------------------------------- HER SLUTTER INFOSIDEN ----------------------------------->
?>