$adminuser = $_SESSION["user"]["name"];
$adminlevel = $_SESSION["user"]["level"];
if($_SESSION["user"]["level"] < 2){
error("Invalid information", "Sorry, this is only available to website admins.",true);
} else {
switch($_GET["function"]){
case "add_link";
startpage("Add link");
if($_POST["link"] != ""){
$link = addslashes($_POST["link"]);
$query = "INSERT into `links` values('0', '$link', '0')";
mysql_query($query);
$res = mysql_query("SELECT ID from `links` where link='$link'");
$disp = mysql_fetch_row($res);
?>
Link print $link ?> added to database with ID print $disp ?>
}
?>
" />
" />
endpage();
break;
case "edit";
startpage("Edit User");
if ($_POST["submitted"] == "yes"){
mysql_query("UPDATE users set firstname='".$_POST["newfirstname"]."' where username='".$_POST["oldusername"]."'");
mysql_query("UPDATE users set lastname='".$_POST["newlastname"]."' where username='".$_POST["oldusername"]."'");
mysql_query("UPDATE users set email='".$_POST["newemail"]."' where username='".$_POST["oldusername"]."'");
mysql_query("UPDATE users set ip='".$_POST["newip"]."' where username='".$_POST["oldusername"]."'");
mysql_query("UPDATE users set date_reg='".$_POST["newdatereg"]."' where username='".$_POST["oldusername"]."'");
mysql_query("UPDATE users set last_login='".$_POST["newlastlogin"]."' where username='".$_POST["oldusername"]."'");
mysql_query("UPDATE users set username='".$_POST["newusername"]."' where username='".$_POST["oldusername"]."'");
mysql_query("UPDATE users set points='".$_POST["newpoints"]."' where username='".$_POST["oldusername"]."'");
$query = "INSERT INTO admin_logs (admin, action, member, changed_info, date, reason) VALUES ('".$_SESSION["user"]["name"]."','Edited: FName=".$_POST["newfirstname"]." LName=".$_POST["newlastname"]." EMail=".$_POST["newemail"]." NDR=".$_POST["newlastlogin"]." NLL=".$_POST["newlastlogin"]." NUN=".$_POST["newusername"]." Pts=".$_POST["newpoints"]."','".$_POST["oldusername"]."', 'Accepted', '".$time."','')";
mysql_query($query);
echo $_POST["username"]."'s info updated!";
}
$nick = $_GET["nick"];
if($nick != ""){
$query = "SELECT * FROM users WHERE username = '$nick'";
$exec = mysql_query($query);
$rows = mysql_fetch_array($exec);
?>
Username:
" />
" />
Firstname:
" />
Lastname:
" />
Email:
" />
Level:
print $rows["level"] ?>
IP:
" />
Date Registered:
" />
Last Login:
" />
endpage();
} else {
Error("Incorrect information", "No nickname selected!");
}
break;
case "upgrade_user";
startpage("Upgrade user");
$user = $_POST["username"];
if ($_POST["username"] != ""){
// check if user exits
$query = "SELECT * from users where username='$user'";
$res = mysql_query($query);
$numb = mysql_num_rows($res);
if ($numb != 0){
$row = mysql_fetch_array($res);
$realuser = $row["username"];
$oldlevel = $row["level"];
mysql_query("UPDATE users set level='".$_POST["newlevel"]."' where username='$realuser'");
$res1 = mysql_query("SELECT * from users where username='$realuser' AND level='".$_POST["newlevel"]."'");
$num1 = mysql_num_rows($res1);
if ($num1 != 0){
mysql_query("INSERT INTO admin_logs (admin, action, member, changed_info, date, reason) VALUES ('$adminuser','Changed level to ".$_POST["newlevel"]."','$realuser','Accepted','$time','')");
} else {
error("Unknown error", "Could not upgrade user");
}
} else {
error("Incorrect Information", "User does not exist");
}
} else {
error("Incorrect information", "You must enter a user name");
}
?>
";
//$query = "SELECT * from admin_logs ORDER BY date DESC LIMIT $from, $max_results";
$res = mysql_query("SELECT * from admin_logs ORDER BY date DESC LIMIT $from, $max_results");
//$num = mysql_num_rows($res);
while($row = mysql_fetch_array($res)){
echo "
".$row["admin"]."
".$row["action"]."
".$row["member"]."
".$row["changed_info"]."
".date("d-n-Y g:i:s A", $row["date"])."
".$row["reason"]."
\n";
}
// Figure out the total number of results in DB:
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM admin_logs"),0);
// Figure out the total number of pages. Always round up using ceil()
$total_pages = ceil($total_results / $max_results);
echo "
endpage();
break;
default;
startpage("Admin panel");
echo "Welcome $adminuser, to the admin panel, please click below to look at the available functions