View file admincp/index.php

File size: 9.71Kb
<?php

include 'inc/db.php';
include 'inc/func.php';

if(($_SESSION['admin'] != $setup['login']) || ($_SESSION['password'] != $setup['password']))
{
header('Location: login.php');
exit;
}
   if(!isset($_GET['page']))
      $page = 1;
   else
      $page = $_GET['page'];
switch($_GET['act'])
{
case 'exit':
session_destroy();
header('Location: login.php');
exit();
break;
case 'list':
include 'inc/head.php';
$kmess = 50;
$vr3 = date("d F y", time());
$q = strtotime($vr3);
if(!isset($_GET['sort']))
   $sort = 0;
else
   $sort = $_GET['sort'];
echo '<div class="white"><div class="tit"><div class="tico"><h2>Sort By</h2></div></div>
<div class="flow f">
<div class="d">
[<a href="?act=list&sort=0&page='.$page.'">ID</a>] [<a href="?act=list&sort=1&page='.$page.'">New</a>] [<a href="?act=list&sort=2&page='.$page.'">Host</a>] [<a href="?act=list&sort=3&page='.$page.'">Hits</a>] [<a href="?act=list&sort=4&page='.$page.'">Email</a>]</div></div></div>
<div class="white"><div class="tit"><div class="tico"><h2>Search</h2></div></div>
<div class="flow f">
<div class="d">
<form action="" method="post"><input type="text" name="search" value=""><br/><select name="search_by"><option value="id">ID</option><option value="login">Domain</option><option value="email">Email</option></select>
<input type="submit" name="submit" value="OK"></form></div></div></div>';

if(!isset($_POST['search']) || (isset($_POST['search']) && $_POST['search'] == ''))
{
        $req = mysql_query("SELECT COUNT(*) FROM `users`");
        $colmes = mysql_result($req, 0);
$start = $page * $kmess - $kmess;
if ($colmes < $start + 10) {
    $end = $colmes;
}
else {
    $end = $start + 10;
}
    $limit = ' LIMIT '.$start.', '.$kmess;
}

switch($sort)
{
   case 1: $sort_by = 'id DESC';
   break;
   case 2: $sort_by = 'host DESC';
   break;
   case 3: $sort_by = 'hits DESC';
   break;
   case 4: $sort_by = 'email';
   break;
   default: $sort_by = 'id';
}

if(isset($_POST['search']) && $_POST['search'] != '')
{
   if($_POST['search_by'] == 'login')
      $req = mysql_query('SELECT u.id as id, active, block_date, login, domain, name, surname, email, host as host, hits as hits FROM users u LEFT JOIN (SELECT `id`, Max(`host`) as `host`, Max(`hits`) as `hits` FROM `counter` WHERE `date` > "'.$q.'" GROUP BY `id`) as x ON u.id = x.id WHERE u.login = "' . $_POST['search'] . '"');
   elseif($_POST['search_by'] == 'id')
      $req = mysql_query('SELECT u.id as id, active, block_date, login, domain, name, surname, email, host as host, hits as hits FROM users u LEFT JOIN (SELECT `id`, Max(`host`) as `host`, Max(`hits`) as `hits` FROM `counter` WHERE `date` > "'.$q.'" GROUP BY `id`) as x ON u.id = x.id WHERE u.id = "' . (int)$_POST['search'] . '"');
   elseif($_POST['search_by'] == 'email')
      $req = mysql_query('SELECT u.id as id, active, block_date, login, domain, name, surname, email, host as host, hits as hits FROM users u LEFT JOIN (SELECT `id`, Max(`host`) as `host`, Max(`hits`) as `hits` FROM `counter` WHERE `date` > "'.$q.'" GROUP BY `id`) as x ON u.id = x.id WHERE u.email = "'.$_POST['search'].'"');
}
else
{
   $req = mysql_query('SELECT u.id as id, active, block_date, login, domain, name, surname, email, host as host, hits as hits FROM users u LEFT JOIN (SELECT `id`, Max(`host`) as `host`, Max(`hits`) as `hits` FROM `counter` WHERE `date` > "'.$q.'" GROUP BY `id`) as x ON u.id = x.id ORDER BY ' . $sort_by . $limit);
}
echo '<div class="white"><div class="tit"><div class="tico"><h2>Result</h2></div></div>
<div class="flow f">
<div class="d">';

while($res = mysql_fetch_array($req))
{
echo '<div class="line">ID: ' . $res['id'] . ' [<a href="?act=info&id=' . $res['id'] . '" title="Info">?</a>]<br/><a href="http://'.$res['login'].'.'.$res['domain'].'" target="_blank">'.$res['login'].'.'.$res['domain'].'</a><br/>Mail: ' . $res['email'] . '<br/>Today: ['.(int)$res['host'].'/'.(int)$res['hits'].']<br/>Name: '.$res['surname'].' '.$res['name'].'</div>';
}
if ($colmes > $kmess) {
    echo '<div class="line" style="text-align:center;">';
    $ba = ceil($colmes / $kmess);
    if ($start != 0) {
        echo '<a href="?act=list&sort='.$sort.'&page='.($page - 1).'">&lt;&lt;</a> ';
    }
    $asd = $start - $kmess;
    $asd2 = $start + 20;
    if ($asd < $colmes && $asd > 0) {
        echo ' <a href="?act=list&sort='.$sort.'&page=1">1</a> .. ';
    }
    $page2 = $ba - $page;
    $pa = ceil($page / 2);
    $paa = ceil($page / 3);
    $pa2 = $page + floor($page2 / 2);
    $paa2 = $page + floor($page2 / 3);
    $paa3 = $page + (floor($page2 / 3) * 2);
    if ($page > 13) {
        echo ' <a href="?act=list&sort='.$sort.'&page='.$paa.'">' . $paa . '</a> <a href="?act=list&sort='.$sort.'&page='.($paa + 1).'">' . ($paa + 1) .
        '</a> .. <a href="?act=list&sort='.$sort.'&page='.($paa * 2).'">' . ($paa * 2) . '</a> <a href="?act=list&sort='.$sort.'&page='.($paa * 2 + 1).'">' . ($paa * 2 + 1) . '</a> .. ';
    }
    elseif ($page > 7) {
        echo ' <a href="?act=list&sort='.$sort.'&page='.$pa.'">' . $pa . '</a> <a href="?act=list&sort='.$sort.'&page='.($pa + 1).'">' . ($pa + 1) . '</a> .. ';
    }
    for ($i = $asd; $i < $asd2;) {
        if ($i < $colmes && $i >= 0) {
            $ii = floor(1 + $i / $kmess);

            if ($start == $i) {
                echo " [<b>$ii</b>]";
            }
            else {
                echo ' <a href="?act=list&sort='.$sort.'&page='.$ii.'">' . $ii . '</a> ';
            }
        }
        $i = $i + $kmess;
    }
    if ($page2 > 12) {
        echo ' .. <a href="?act=list&sort='.$sort.'&page='.$paa2.'">'.$paa2.'</a> <a href="?act=list&sort='.$sort.'&page='.($paa2 + 1).'">' . ($paa2 + 1) .
        '</a> .. <a href="?act=list&sort='.$sort.'&page='.($paa3).'">' . ($paa3) . '</a> <a href="?act=list&sort='.$sort.'&page='.($paa3 + 1).'">'.($paa3 + 1).'</a> ';
    }
    elseif ($page2 > 6) {
        echo ' .. <a href="?act=list&sort='.$sort.'&page='.$pa2.'">'.$pa2.'</a> <a href="?act=list&sort='.$sort.'&page='.($pa2 + 1).'">' . ($pa2 + 1) . '</a> ';
    }
    if ($asd2 < $colmes) {
        echo ' .. <a href="?act=list&sort='.$sort.'&page='.$ba.'">'.$ba.'</a>';
    }
    if ($colmes > $start + $kmess) {
        echo ' <a href="?act=list&sort='.$sort.'&page='.($page + 1).'">&gt;&gt;</a>';
    }
echo '</div>';
}
echo '</div></div>';
break;
case 'info':
include 'inc/head.php';
echo '<div class="white"><div class="tit"><div class="tico"><h2>Menu</h2></div></div>
<div class="flow f">
<div class="d">
<br/><br/><br/><br/><br/>
</div>
<div class="d">
<a href="?act=exit">Exit</a>
</div>
</div>';
break;
case 'set':
include 'inc/head.php';
echo'<div class="d">setting Moduls not installed</div>';
break;
case 'news':
include 'inc/head.php';
echo '<div class="white"><div class="tit"><div class="tico"><h2>News</h2></div></div><div class="flow f">';
$do = isset ($_GET['do']) ? $_GET['do'] : '';
switch($do){
case 'add' :
if(isset($_POST['submit']) && isset($_POST['name']) && isset($_POST['text']))
{
$name = check($_POST['name']);
$text = trim($_POST['text']);
mysql_query("INSERT INTO `news` VALUES(0,'$realtime','$name','".mysql_real_escape_string($text)."')");
echo '<div class="d">News successfull added! <a href="?act=news">News</a></div></div>';
} else {
echo '<div class="d"><form action="?act=news&do=add" method="post">';
echo '<u>Title</u><br/><input type="text" name="name"/>';
echo '<u>Тext</u><br/><textarea rows="4" name="text"></textarea>';
echo '<input type="submit" name="submit" value="OK"/></form><p></div></div>';
}
break;
default:
$kmess = 10;
$start = $page * $kmess - $kmess;
if ($colmes < $start + 10) {
    $end = $colmes;
}
else {
    $end = $start + 10;
}
$req = mysql_query("SELECT COUNT(*) FROM `news`");
$total = mysql_result($req, 0);
$req = mysql_query("SELECT * FROM `news` ORDER BY `time` DESC LIMIT " . $start . "," . $kmess . ";");
while ($nw1 = mysql_fetch_array($req)) {
            echo '<div class="line">';
            $text = $nw1['text'];
            $text = htmlentities($text, ENT_QUOTES, 'UTF-8');
            $text = str_replace("\r\n", "<br/>", $text);
            $text = tags($text);
            $vr = date("d.m.y / H:i", $nw1['time']);
            echo '<b>' . $nw1['name'] . '</b><br/>' . $text . '<div class="d"><font color="#999999">' . $vr1 . '</font><br/>';
                echo '<a href="?act=news&do=edit&id=' . $nw1['id'] . '">Edit</a> | <a href="?act=news&do=del&id=' . $nw1['id'] . '">Del</a>';
            echo '</div></div>';
            ++$i;
        }
        echo '<div class="line">Total:&nbsp;' . $total . '</div>';
        if ($total > $kmess) {
            echo '<p>' . pagenav('news.php?', $start, $total, $kmess) . '</p>';
        }
echo '<div class="line"><a href="?act=news&do=add">Add News</a></div><div class="line"><a href="?act=news&do=cleant">Cleant</a></div>';
        }
break;
case 'del':
$req = mysql_query("SELECT COUNT(*) FROM `news`");
$total = mysql_result($req, 0);
$req = mysql_query("SELECT * FROM `news` ORDER BY `time` DESC LIMIT " . $start . "," . $kmess . ";");
while ($nw1 = mysql_fetch_array($req)) {
$id=$nw1['id'];
mysql_query("DELETE FROM `news` WHERE `news`.`id`='$id'");
echo '<div class="d">News successfull Deleted! <a href="?act=news">News</a></div></div>';
}
break;

case 'edit':
break;
default:
include 'inc/head.php';
$req = mysql_query('SELECT count(*) as count FROM users');
$total = mysql_result($req, 0);
$time = time() - 86400;
$req = mysql_query('SELECT count(*) as count FROM users WHERE date > "'.$time.'"');
$new = mysql_result($req, 0);

echo '<div class="white"><div class="tit"><div class="tico"><h2>Menu</h2></div></div>
<div class="flow f">
<div class="d">
<a href="?act=news">News</a>
</div>
<div class="d">
<a href="?act=list">Users</a> ('.$total.'/<font color="red">+'.$new.'</font>)
</div>
<div class="d">
<a href="?act=set">Settings</a>
</div>
<div class="d">
<a href="?act=exit">Exit</a>
</div>
</div>';
}
include 'inc/foot.php';

?>