hehe, nej.. Jeg er ved at rive håret af mig selv snart - har sgu kæmpet med denne fejl i alt for lang tid nu! :o)
admin.php:
<?
$page_title = 'Adminstration';
include('includes/top.php');
$mode = get('mode');
$sec = get('sec');
$id = get('id');
$page = get('page',1);
$pr_page = 10;
$count = 0;
switch ($mode)
{
case 'admin':
check_admin();
if ($sec == 'savecreate')
{
$name = post('name');
$text = post('text');
if ($name != '' AND $text != '')
{
mysql_query(db_query("INSERT INTO news (name,text,date) VALUES('" . $name . "','" . $text . "',NOW())"));
redirect('?mode=admin&sec=created');
}
}else if ($sec == 'saveedit')
{
}else if ($sec == 'delconfirm')
{
}
if ($sec == 'create')
{
?>
<strong>Opret nyhed</strong>
<form action="?mode=admin&sec=savecreate" method="post">
<table border="0" style="width: 100%;">
<tr>
<td>Overskrift</td>
<td><input type="text" name="name"></td>
</tr>
<tr>
<td style="vertical-align:top;">Tekst</td>
<td><textarea name="text" cols="40" rows="5"></textarea></td>
</tr>
<tr>
<td></td>
<td><?=submit('Gem!');?></td>
</tr>
</table>
</form>
<?
}else if ($sec == 'edit')
{
}else if ($sec == 'del')
{
}else{
?>
<table border="0" style="width:100%; ">
<tr>
<?
if ($sec == 'created')
{
?>
<td style="width:70%;" class="green">
Din nyhed er nu oprettet!
</td>
<?
}else{
?>
<td style="width:70%;">
Du er nu logget ind. Herfra kan du oprette, redigere eller slette nyheder på sitet.
</td>
<?
}
?>
<td style="width:30%;">
<table border="0" style="width:100%; border: 1px solid silver;" class="footer">
<tr>
<td>Brugernavn:</td>
<td><?=ucfirst($_SESSION['smh_username'])?></td>
</tr>
<tr>
<td>Password:</td>
<td>******</td>
</tr>
<tr>
<td>Sidste login:</td>
<td style=""><?=danish_date('d-m-Y',$_SESSION['smh_last_login'])?></td>
</tr>
</table>
</td>
</tr>
</table>
<br />
<br />
<table border="0" style="width:100%; " cellspacing="0" cellpadding="5">
<tr>
<td colspan="3" style="text-align:center; "><a href="?mode=admin&sec=create">Opret nyhed</a></td>
</tr>
<?
$query_strip = "SELECT n.id, n.name, UNIX_TIMESTAMP(n.date) date_raw, DATE_FORMAT(n.date, '%d-%m-%Y') date FROM news n ORDER BY n.date DESC";
$query = $query_strip . " LIMIT " . ($pr_page*($page-1)) . ',' . $pr_page;
$result = db_query($query);
$num_rows = mysql_num_rows(db_query($query_strip));
$pages_total = ceil(divide($num_rows,$pr_page));
if ($page > $pages_total) redirect('?');
echo '
<tr>
<td colspan="3" align="center" class="small">Side ' . $page . ' af ' . $pages_total . '<br /><br /></td>
</tr>
<tr>
<td width="25%" class="table_header">Dato</td>
<td width="50%" class="table_header">Navn</td>
<td width="25%" class="table_header"></td>
</tr>
';
while ($news = mysql_fetch_array($result)){
$news_id = $news['id'];
$news_name = $news['name'];
$news_date_long = ucfirst(danish_date('l \d. j. F Y \k\l. H:i',$news['date_raw']));
$news_date = $news['date'];
echo '
<tr onclick="gotourl(\'?mode=admin&sec=edit&id=' . $news_id . '\');" onmouseover="colorIN2(this);" onmouseout="colorOUT2(this);">
<td><a title="' . $news_date_long . '" class="none">' . $news_date . '</a></td>
<td>' . $news_name . '</td>
<td><a href="nyheder.php?id=' . $news_id . '">Vis</a>
<a href="?mode=admin&sec=del&id=' . $news_id . '">Slet</a></td>';
echo '
</tr>
';
$count++;
}
echo '
<tr>
<td colspan="8" align="center" class="small">';
if ($page != 1){
echo '<a href="?mode=admin&page=' . ($page-1) . '"><< Forrige</a>';
}else{
echo '<span class="gray"><< Forrige</span>';
}
echo '<img src="images/spacer.gif" width="15" height="1" alt="" />';
for ($i = 1; $i <= $pages_total; $i++)
{
if ($page == $i)
{
echo ' ' . $i;
}else{
echo ' <a href="?mode=admin&page=' . $i . '">' . $i . '</a>';
}
}
echo '<img src="images/spacer.gif" width="15" height="1" alt="" />';
if ($num_rows > ($count+($pr_page*($page-1)))){
echo '<a href="?mode=admin&page=' . ($page+1) . '">Næste >></a>';
}else{
echo '<span class="gray">Næste >></span>';
}
echo '</td>';
echo '
</tr>
';
?>
<tr>
<td colspan="3" style="text-align:center; "><a href="?mode=logout">Log ud</a></td>
</tr>
</table>
<?
}
break;
case 'login':
$username = post('username');
$password = post('password');
if ($username == '' OR $password == '') redirect('?mode=fejl');
$result = db_query("SELECT a.id FROM admin a WHERE a.username = '" . $username . "' AND a.password = '" . $password . "'");
if (!$admin = mysql_fetch_array($result))
{
redirect('?mode=fejl');
}else{
do_login($admin['id']);
redirect('?mode=admin');
}
break;
default:
?>
<form action="?mode=login" method="post">
<table border="0" style="width:50%;">
<tr>
<td>Brugernavn</td>
<td><input type="text" name="username" id="username" size="20" /></td>
</tr>
<tr>
<td>Password</td>
<td><input type="password" name="password" size="20" /></td>
</tr>
<tr>
<td></td>
<td><?=submit('Login!')?></td>
</tr>
<?
if ($mode == 'fejl')
{
echo '
<tr>
<td class="red" colspan="2">Ugyldig login!<br /><br /></td>
</tr>
';
}
else if ($mode == 'logout')
{
do_logout();
echo '
<tr>
<td class="red" colspan="2">Du er nu logget ud!<br /><br /></td>
</tr>
';
}
?>
</table>
</form>
<script type="text/javascript">
window.onload=document.getElementById('username').focus();
</script>
<?
break;
}
?>
<?
include('includes/bottom.php');
?>
