Changeset 4

Timestamp:

Nov 26, 2008, 9:56:46 PM (15 years ago)

Author:

maron

Message:

 

Files:

• config.sample.php (modified) (1 diff)
• frontend.php (modified) (2 diffs)
• global.php (modified) (1 diff)
• index.php (modified) (2 diffs)
• language_cz.php (modified) (1 diff)
• mass (added)

config.sample.php

@@ -12 +12 @@
   'Charset' => 'utf-8',
   'BaseURL' => '',
+  'webpass' => '',
 );
 

frontend.php

@@ -12 +12 @@
         function show_mass() {
                 global $database;
-                $Query = $database->select('mass', '*');
+                $Query = $database->select('mass', '*', 'time > now()');
               while($DbRow = $Query->fetch_array())
                 { 
@@ -18 +18 @@
                 }
         }
+
+        function show_login() {
+                echo '<form action="?admin" method="post">'.GIF_PASS.'<input name="pass"></form>';
+        }
+
+        function show_upload_mass() {
+                echo UPLOAD_MASS.'<form action="?admin" method="post">
+                        '.GIF_DATE.' <input name="date"><br>
+                        '.GIF_FILE.' <input name="file" type="file"><br>
+                        <input value="Uložit" type="submit">
+                        </form>';
+        }
+
+        function save_file() {
+        if (array_key_exists('date',$_POST) ) {
+                if (is_uploaded_file($_FILES['file']['tmp_name'])) {
+                        echo "Soubor ". $_FILES['file']['name'] ." Byl nahrán";
+                        $tmp_name = $_FILES["file"]["tmp_name"];
+                        move_uploaded_file($tmp_name, "mass/".$_POSS['date']);
+                } else {
+                        echo "Possible file upload attack: ";
+                        echo "filename '". $_FILES['file']['tmp_name'] . "'.";
+                }
+        }
+
+        }
 ?>

global.php

@@ -1 +1 @@
 <?php
+session_start();
+
         include('config.php');
 

index.php

@@ -17 +17 @@
                 echo ROZPIS;
                 show_mass();
+                echo '<br><br>';
+                $files = scandir('mass');
+                for ($i=0;$i<count($files);++$i) {
+                  $file = 'mass/'.$files[$i];
+                  if (filetype($file) <> 'dir') echo '<a href="?img='.$file.'"><img width="200" src='.$file.' title="'.FILE_SAVED . date ("m d Y H:i:s.", filemtime($file)).'"></a>';
+                }
                 show_article(3);
 
@@ -26 +32 @@
         } else if (array_key_exists('admin',$_GET)) {
                 echo ADMIN;
-                show_article(5);
+                if (array_key_exists('pass',$_POST) ) {
+                  if ($_POST['pass'] == $Config['webpass'])  {
+                        $_SESSION['pass'] = $_POST['pass'];
+                  } else {
+                        echo BAD_PASS;
+                  }
+                } 
+                if (isset($_SESSION['pass'])) {
+                        if ($_SESSION['pass'] == $Config['webpass']) {
+                                //administrátorská část
+                                show_upload_mass();  //nahrání rozpisu
+                                save_file();
+                                show_article(5);
+                        }
+                } else {
+                  show_login();
+                }
+
+
+        } else if (array_key_exists('img',$_GET)) {
+                $file = $_GET['img'];
+                echo '<img width="100%" src='.$file.' title="'."Soubor byl vložen " . date ("m d Y H:i:s.", filemtime($file)).'">';
 
 

language_cz.php

@@ -27 +27 @@
 define('ADMIN', '<h2>Administrace stránek</h2>');
 
+
+//message
+define('BAD_PASS', 'Zadali jste špatné heslo');
+define('FILE_SAVED', "Soubor byl vložen ");
+define('GIF_PASS', ' Zadejte heslo: ');
+define('GIF_FILE', ' Soubor ');
+define('GIF_DATE', ' Datum od - do ');
+define('UPLOAD_MASS', ' <b>Nahrání rozpisu mší</b> ');
 ?>