Файловый менеджер

Файловый менеджер - Редактировать - /var/www/jonas-eriksen.dk/pic/private/admin.tar

Назад
anniversary.php��0000644��00000003450�15233463225�0007625 0��ustar�00��<?php require_once('../include.php'); $admin = new admin($db); $log = new log($db); $year = date("Y"); $years = []; $admin->passwordResetCheck(); if (!$admin->admin_level(0)) { header("location: /static/401.php"); die(); } include('../static/header.php'); ?> <?php foreach ($admin->getAnniversaryYears() AS $y) { array_push($years, $year-(int)$y[0]); } ?> <div class="container" style="padding-top:70px;"> <div class="row"> <div class="col-lg-12"> <table id="userTable" class="table-bordered" cellspacing="0" width="100%"> <thead> <tr> <th>Skyttenummer</th> <th>Navn</th> <th>Jubilæum</th> </tr> </thead> <tfoot> <tr> <th>Skyttenummer</th> <th>Navn</th> <th>Jubilæum</th> </tr> </tfoot> <tbody> <?php foreach($admin->getAnniversaryUsers(implode(', ', $years)) AS $row) { echo "<tr>"; echo "<td>$row[0]</td>"; echo "<td><a href='/user/profile.php?user=$row[3]'>$row[1]</a></td>"; echo "<td>" . ((int)$year-(int)$row[2]) . " år</td>"; echo "</tr>"; } ?> </tbody> </table> </div> </div> </div> <script> $(document).ready(function () { $('#userTable').DataTable(); }); </script>��profile.php��0000644��00000015112�15233463225�0006722 0��ustar�00��<?php include('../include.php'); $admin = new admin($db); $admin->passwordResetCheck(); if (!$admin->admin_level(1)) { $admin->redirect('/static/401.php'); } $log = new log($db); $user = $admin->getAdmin($_GET['admin']); if (isset($_POST['change'])) { if (!$admin->changePasswordForUser($_SESSION['username'], $_POST['password'], $_GET['admin'], $_POST['newpassword'])) ; { echo '<span class="badge badge-pill badge-danger" style="background-color: red; font-size: large">Fejl i ændring af kode!</span>'; } $log->addLog($_SESSION['userId'], $_SESSION['username'] . ' har ændret password for ' . $user[0], "Password", null); } if (isset($_POST['reset'])) { $admin->forceChangePasswordForUser($_GET['admin']); $log->addLog($_SESSION['userId'], $_SESSION['username'] . ' har sat password til resat for ' . $user[0], "Password", null); } if (isset($_POST['save'])){ if (isset($_POST['deleted'])) { $isDeleted = 1; } else { $isDeleted = 0; } if (!$admin->saveAdmin($_GET['admin'], $_POST['name'], $isDeleted, $_POST['level'])) { echo '<span class="badge badge-pill badge-danger" style="background-color: red; font-size: large">Information ikke gemt</span>'; } $log->addLog($_SESSION['userId'], $_SESSION['username'] . ' har opdateret brugeren ' . $user[0], 'Admin', '/admin/show.php?admin=' . $_GET['admin']); $link = '/admin/show.php?admin=' . $_GET['admin'] . '&success-save=true'; echo "<script type='text/javascript'>window.location.href = '$link';</script>"; } if (isset($_GET['success-code'])) { echo '<span class="badge badge-pill badge-success" style="background-color: green; font-size: large">Succes! Kode ændret.</span>'; } if(isset($_GET['success-save'])) { echo '<span class="badge badge-pill badge-success" style="background-color: green; font-size: large">Succes! Information gemt.</span>'; } include('../static/header.php'); ?> <h2>Admin profile</h2> <div style="width: 100%;"> <div style="float:left; width: 50%"> <div class="container"> <div class="row"> <div class="col-lg-12"> <table id="userTable" class="table-bordered" cellspacing="0" width="100%"> <thead> <tr> <th>Brugernavn</th> <th>Navn</th> <th>Slettet</th> <?php if ($admin->admin_level(1)) { echo '<th>Admin level</th>'; echo '<th>Sidste login</th>'; } ?> </tr> </thead> <tbody> <tr> <td><?php echo $user[0]; ?></td> <td><?php echo $user[1]; ?></td> <td> <?php if ($user[2] == 1) { echo "Ja"; } else { echo "Nej"; } ?> </td> <?php if ($admin->admin_level(1)) { ?> <td><?php echo $user[3]; ?></td> <td><?php echo $user[4]; ?></td> <?php } ?> </tr> </tbody> </table> </div> </div> </div> <h2>Ændre profil</h2> <div class="container"> <div class="row"> <div class="col-lg-12"> <table id="userTable" class="table-bordered" cellspacing="0" width="100%"> <thead> <tr> <th>Brugernavn</th> <th>Navn</th> <th>Slettet</th> <?php if ($admin->admin_level(1)) { echo '<th>Admin level</th>'; echo '<th></th>'; } ?> </tr> </thead> <tbody> <tr> <form name="save" method="post"> <td><?php echo $user[0]; ?></td> <td><input type="text" value="<?php echo $user[1]; ?>" name="name"></td> <td style="align-content: center"> <?php if ($user[2]) { echo '<input type="checkbox" name="deleted" checked>'; } else { echo '<input type="checkbox" name="deleted">'; } ?> </td> <td><input type="text" value=" <?php echo $user[3] ?>" name="level"></td> <td> <button name='save'>Gem ændringer</button> </td> </form> </tr> </tbody> </table> </div> </div> </div> </div> </div> <div style="float:right;"> <?php if ($admin->admin_level(1)) { ?> <h3>Ændre password</h3> <form method="post" style=""> <table> <col width="100"> <col width="80"> <tr> <td>Dit brugernavn</td> <td><input type="text" name="username" value="<?php echo $_SESSION['username'] ?>" readonly> </td> </tr> <tr> <td>Dit password</td> <td><input type="password" name="password" required></td> </tr> <tr> <td>Nyt password</td> <td><input type="password" name="newpassword" required></td> </tr> </table> <button name="change"> Ændre password </button> </form> <form method="post"> <button name='reset' value='true'>Nulstil password ved næste login</button> </form> <?php } ?> </div> </div>��index.php��0000644��00000004064�15233463225�0006375 0��ustar�00��<?php require_once('../include.php'); $admin = new admin($db); $log = new log($db); $admin->passwordResetCheck(); if (!$admin->admin_level(0)) { header("location: /static/401.php"); die(); } include('../static/header.php'); ?> <h2>Administrator kommandoer</h2> <h3>Admin</h3> <ul> <?php if ($admin->admin_level(1)) { echo '<li><a href="new.php">Opret en ny admin eller bruger (admin)</a></li>'; } echo '<li><a href="password.php">Håndter egent passwords</a></li>'; if ($admin->admin_level(1)) { echo '<li><a href="show.php">Liste over admins</a> </li>'; } ?> </ul> <h3>Abonnementer</h3> <ul> <li><a href="subscription.php">Se ubetalte abonnementer (bruger)</a></li> <li><a href="subscription-paid.php">Se betalte abonnementer (bruger)</a></li> </ul> <h3>Eksport</h3> <ul> <?php if ($admin->admin_level(1)) { echo '<li><a href="/export/exportUsers.php">Eksporter aktive skytter (admin)</a></li>'; echo '<li><a href="/export/exportUsersUnder25.php">Eksporter aktive skytter under 25 (admin)</a></li>'; echo '<li><a href="/export/exportEvent.php">Eksporter benyttelse af våbenbrug (admin)</a></li>'; } ?> </ul> <h3>Skytter</h3> <ul> <?php echo '<li><a href="../user/new.php">Opret ny skytte (bruger)</a></li>'; echo '<li><a href="/static/upload.php">Opload billede af skytte (bruger)</a> </li>'; echo '<li><a href="/admin/anniversary.php">Anniversary (bruger)</a></li>'; if ($admin->admin_level(1)) { echo '<li><a href="skv.php">SKV oprettelse og ændringer (admin)</a> </li>'; } ?> </ul> <h3>Log</h3> <ul> <?php if ($admin->admin_level(0)) { echo '<li><a href="/log/">Alle logs (bruger)</a></li>'; foreach ($log->getLogTypes() as $type) { ?> <li><a href="/log/?type=<?php echo $type[0] ?>"> <?php echo $type[0] ?> (bruger) </a></li> <?php } } ?> </ul> <?php include('../static/footer.php'); ��upload.php��0000644��00000005325�15233463225�0006553 0��ustar�00��<?php include ("upload_class.php"); //classes is the map where the class file is stored (one above the root) $my_upload = new file_upload ; $my_upload->upload_dir = ""; // "files" is the folder for the uploaded files (you have to create this folder) $my_upload->extensions = array(".png", ".zip", ".pdf", ".jpg", ".JPG"); // specify the allowed extensions here // $my_upload->extensions = "de"; // use this to switch the messages into an other language (translate first!!!) $my_upload->max_length_filename = 50; // change this value to fit your field length in your database (standard 100) $my_upload->rename_file = true; if(isset($_POST['Submit'])) { $my_upload->the_temp_file = $_FILES['upload']['tmp_name']; $my_upload->the_file = $_FILES['upload']['name']; $my_upload->http_error = $_FILES['upload']['error']; $my_upload->replace = (isset($_POST['replace'])) ? $_POST['replace'] : "n"; // because only a checked checkboxes is true $my_upload->do_filename_check = (isset($_POST['check'])) ? $_POST['check'] : "n"; // use this boolean to check for a valid filename $new_name = (isset($_POST['name'])) ? $_POST['name'] : ""; if ($my_upload->upload($new_name)) { // new name is an additional filename information, use this to rename the uploaded file $full_path = $my_upload->upload_dir.$my_upload->file_copy; $info = $my_upload->get_uploaded_file_info($full_path); // ... or do something like insert the filename to the database } } ?> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Upload example</title> <style type="text/css"> label { float:left; display:block; width:120px; } input { float:left; } </style> </head> <body> <h3>File upload script:</h3> <form name="form1" enctype="multipart/form-data" method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>"> <label for="upload">Select a file...</label><input type="file" name="upload" size="30"><br clear="all"> <label for="name">New name?</label> <select name="name"> <option value="3">3</option> <option value="55">55</option> </select> (without extension!) <br clear="all"> <label for="replace">Replace ?</label><input type="checkbox" name="replace" value="y"><br clear="all"> <label for="check">Validate filename ?</label><input name="check" type="checkbox" value="y" checked><br clear="all"> <input style="margin-left:120px;" type="submit" name="Submit" value="Submit"> </form> <br clear="all"> <p><?php echo $my_upload->show_error_string(); ?></p> <?php if (isset($info)) echo "<blockquote>".nl2br($info)."</blockquote>"; ?> </body> </html> ��subscription.php��0000644��00000006774�15233463225�0010024 0��ustar�00��<?php require_once('../include.php'); error_reporting(0); $admin = new admin($db); $admin->passwordResetCheck(); $user = new user($db); if (!$admin->admin_level(0)) { header("location: /static/401.php"); die(); } $stmt = $db->prepare("SELECT cpr, shooterId, fullname, adress, birthday, phone, email, subscriptionPaid, ownWeapon, id FROM result_users WHERE subscriptionPaid = 0 AND isDeleted != 1"); $stmt->execute(); if (isset($_POST['reset'])) { $stmt = $db->prepare("SELECT id FROM result_users WHERE subscriptionPaid = 1"); $stmt->execute(); foreach ($stmt->fetchAll() as $row) { $user->updateSubcription($row[0], 0); } $admin->redirect('/admin/subscription.php'); } if ($_POST) { if (isset($_POST['cross'])) { $user->updateSubcription($_POST['cross'], 1); } if (isset($_POST['checkmark'])) { $user->updateSubcription($_POST['checkmark'], 0); } $admin->redirect('/admin/subscription.php'); } include('../static/header.php'); ?> <style> div.container { width: 100%; } </style> <div class="container"> <div class="row"> <div class="col-lg-12"> <h2>Ubetalte kontingenter</h2> <?php if ($admin->admin_level(1)) { ?> <form method="post"> <button name='reset' value='true'>Nulstil alle</button> </form> <?php } ?> <table class="table-bordered" cellspacing="0" width="100%"> <thead> <tr> <th>CPR</th> <th>Skyttenummer</th> <th>Navn</th> <th>Adresse</th> <th>Fødselsdag</th> <th>Telefon</th> <th>Email</th> <th>Kontingent betalt</th> <th>Ejer våben</th> </tr> </thead> <tbody> <?php foreach ($stmt->fetchAll() as $row) { $birthday = date_format(new DateTime($row[4]), 'd-m-Y'); echo "<tr>"; echo "<td>" . decrypt($row[0], $encryptKey) . "</td>"; echo "<td><a href='/user/show.php?user=$row[9]'>$row[1]</a></td>"; echo "<td><a href='/user/show.php?user=$row[9]'>$row[2]</a></td>"; echo "<td>$row[3]</td>"; echo "<td>$birthday</td>"; echo "<td>$row[5]</td>"; echo "<td>$row[6]</td>"; echo "<form method='POST'>"; if ($row[7] == 1) { echo "<td align='center'><button style=\"background-color: white;\" name='checkmark' value='$row[9]'><img src='/static/checkmark.jpeg' alt='Ja' width='40'></button></td>"; } else { echo "<td align='center'><button style=\"background-color: white;\" name='cross' value='$row[9]'><img src='/static/red_cross.jpg' alt='nej' width='40'></button></td>"; } echo "</form>"; if ($row[8] != 0) { echo "<td align='center'><img src='/static/checkmark.jpeg' alt='Ja' width='40'></td>"; } else { echo "<td align='center'><img src='/static/red_cross.jpg' alt='nej' width='40'></td>"; } echo "</tr>"; echo "</tbody>"; } ?> </table> </div> </div> </div>��login.php��0000644��00000003015�15233463225�0006371 0��ustar�00��<?php require_once ('../include.php'); $admin = new admin($db); if($admin->admin_level(0)){ $admin->redirect('/user/index.php?login=true'); } if(isset($_POST['btn-login'])){ $uname = $_POST['txt_uname']; $upass = $_POST['txt_password']; if ($admin->login($uname, $upass)){ $admin->redirect('/admin/'); } else{ $error = "Wrong Details"; } } include ('../static/header.php'); ?> <div class="container"> <div class="form-container"> <form method="post"> <h2>Administrator log ind</h2><hr /> <?php if(isset($error)) { ?> <div class="alert alert-danger"> <i class="glyphicon glyphicon-warning-sign"></i>   <?php echo $error; ?> ! </div> <?php } ?> <div class="form-group"> <input type="text" class="form-control" name="txt_uname" placeholder="Username" required /> </div> <div class="form-group"> <input type="password" class="form-control" name="txt_password" placeholder="Your Password" required /> </div> <div class="clearfix"></div><hr /> <div class="form-group"> <button type="submit" name="btn-login" class="btn btn-block btn-primary"> <i class="glyphicon glyphicon-log-in"></i> Log ind </button> </div> </form> </div> </div> </body> </html> ��skv.php��0000644��00000017110�15233463225�0006065 0��ustar�00��<?php require_once('../include.php'); $admin = new admin($db); $admin->passwordResetCheck(); $user = new user($db); $log = new log($db); if (!$admin->admin_level(0)) { $admin->redirect('/static/401.php'); } if ($_POST) { if (isset($_POST['skvNumber'])) { $user->newSKV($_POST['skytteId'], $_POST['skvNumber'], $_POST['skvDate'], $_POST['skvId']); $log->addLog($_SESSION['userId'], "Nyt SKV oprettet.<br />SKV id: ". $_POST['skvId'], "Skytte", "/user/show.php?user=" . $_POST['skytteId']); } if (isset($_POST['skvNumberNew'])) { $user->updateSKV($_GET['id'], $_POST['skvNumberNew'], $_POST['skvDateNew'], $_POST['skvIdNew']); //$log->addLog($_SESSION['userId'], "SKV opdateret. <br />SKV id: " . $_POST['skvIdNew'], "Skytte", "/user/show.php?user=" . $profile[3]); } if (isset($_POST['delete'])) { $user->deleteSKV($_POST['delete']); $skvId = $user->getSKVOnId($_POST['delete']); $log->addLog($_SESSION['userId'], "SKV slettet.<br />SKV id: " . $skvId[0], "Skytte", null); } } $skvRow = $user->getAllSKV(); include('../static/header.php'); ?> <link href="/static/jquery.dataTables.min.css" rel="stylesheet"> <script src="/static/jquery.min.js"></script> <script src="/static/jquery.dataTables.min.js"></script> <div class="container"> <div class="row"> <div class="col-lg-12"> <h2>SKV'ere</h2> <table id="eventTable" class="table-bordered"> <thead> <th>Skyttenummer</th> <th>Navn</th> <th>SKV-id</th> <th>SKV nummer</th> <th>Acceptdato</th> <th>Udløbsdato</th> </thead> <tbody> <?php foreach ($skvRow as $row) { $date = new DateTime($row[5]); date_add($date, date_interval_create_from_date_string('5 years - 90 days')); $today = new DateTime(date("d-m-Y")); //if($date->getTimestamp() - $today->getTimestamp() > 0){ ?> <tr> <td <?php if ($date->getTimestamp() - $today->getTimestamp() < 0) { echo "class='deleted'"; } ?>><?php echo "<a href='/user/show.php?user=$row[0]'>$row[1]</a>" ?></td> <td <?php if ($date->getTimestamp() - $today->getTimestamp() < 0) { echo "class='deleted'"; } ?>><?php echo "<a href='/user/show.php?user=$row[0]'>$row[2]</a>" ?></td> <td <?php if ($date->getTimestamp() - $today->getTimestamp() < 0) { echo "class='deleted'"; } ?>><?php echo $row[3] ?></td> <td <?php if ($date->getTimestamp() - $today->getTimestamp() < 0) { echo "class='deleted'"; } ?>><?php echo $row[4] ?></td> <td <?php if ($date->getTimestamp() - $today->getTimestamp() < 0) { echo "class='deleted'"; } ?>><?php echo date_format(new DateTime($row[5]), 'd-m-Y'); ?></td> <td <?php if ($date->getTimestamp() - $today->getTimestamp() < 0) { echo "class='deleted'"; } ?>><?php echo date_format($date, 'd-m-Y'); ?></td> <td><a href="?id=<?php echo $row[6] ?>">Rediger</a></td> <form method="post"> <td> <button type="submit" name="delete" value="<?php echo $row[6] ?>" onclick="return confirm('Er du sikker?');">Slet </button> </td> </form> </tr> <?php } ?> </tbody> </table> <?php $stmt = $db->prepare("SELECT id, shooterId, fullname FROM result_users WHERE isDeleted != 1"); $stmt->execute(); ?> <h2>Nyt SKV</h2> <table class="table-bordered"> <form method="post"> <tr> <th>Skytte</th> <th>SKV nummer</th> <th>Udstedelses dato</th> <th>SKV-id</th> <th style="display: none"></th> </tr> <tr> <td> <select name="skytteId"> <?php foreach ($stmt->fetchAll() as $row) { ?> <option value="<?php echo $row[0] ?>"><?php echo $row[1] . " " . $row[2] ?></option> <?php } ?> </select> </td> <td> <select name="skvNumber"> <option value="1">1</option> <option value="2">2</option> <option value="3">3</option> <option value="4">4</option> <option value="5">5</option> <option value="6">6</option> </select> </td> <td><input type="date" name="skvDate"></td> <td><input type="number" name="skvId"></td> <td><input type="submit"></td> </tr> </form> </table> <?php if (isset($_GET['id'])) { $profile = $user->getUserSKV($_GET['id']); ?> <h2>Ændre information for <?php echo $profile[0] ?>, SKV-id: <?php echo $profile[3] ?></h2> <table class="table-bordered"> <form method="post"> <tr> <th>SKV nummer</th> <th>Udsedelses dato</th> <th>SKV-id</th> <th style="display: none"></th> </tr> <tr> <td> <select name="skvNumberNew"> <option value="<?php echo $profile[1] ?>"><?php echo $profile[1] ?></option> <option value="1">1</option> <option value="2">2</option> <option value="3">3</option> <option value="4">4</option> <option value="5">5</option> <option value="6">6</option> </select> </td> <td><input type="date" name="skvDateNew" value="<?php echo $profile[2] ?>"></td> <td><input type="number" name="skvIdNew" value="<?php echo $profile[3] ?>"></td> <td><input type="submit"></td> </tr> </form> </table> <?php } ?> </div> </div> </div> <script> $(document).ready(function () { $('#eventTable').DataTable(); }); </script>��Class.admin.php��0000644��00000020311�15233463225�0007413 0��ustar�00��<?php class admin { private $db; function __construct($DB_con) { $this->db = $DB_con; } public function register($username, $password, $name, $level) { try { $new_password = password_hash($password, PASSWORD_DEFAULT); $stmt = $this->db->prepare("INSERT INTO result_internaluser(username, password, name, admin_level) VALUES (:uname, :upass, :name, :level)"); $stmt->bindparam(":uname", $username); $stmt->bindparam(":upass", $new_password); $stmt->bindparam(":name", $name); $stmt->bindparam(":level", $level); $stmt->execute(); return $stmt; } catch (PDOException $e) { echo $e->getMessage(); } } public function login($uname, $upassword) { try { $stmt = $this->db->prepare("SELECT * FROM result_internaluser WHERE username = :uname LIMIT 1"); $stmt->execute(array(':uname' => $uname)); $adminRow = $stmt->fetch(PDO::FETCH_ASSOC); if ($stmt->rowCount() == 1 && $adminRow['isDeleted'] == 0) { if (password_verify($upassword, $adminRow['password'])) { $_SESSION['username'] = $adminRow['username']; $_SESSION['admin_level'] = $adminRow['admin_level']; $_SESSION['userId'] = $adminRow['id']; $_SESSION['resetPassword'] = $adminRow['resetPassword']; $_SESSION['last_activity'] = time(); $time_stmt = $this->db->prepare("UPDATE result_internaluser SET lastLogin = CURRENT_TIME WHERE username = :uname LIMIT 1"); $time_stmt->execute(array(':uname' => $uname)); return true; } else { return false; } } } catch (PDOException $e) { echo $e->getMessage(); } } public function admin_level($level) { if (isset($_SESSION['username'])) { if ($_SESSION['admin_level'] == $level \|\| $level == 0) { return true; } else if ( $level != 0 && $_SESSION['admin_level'] < $level) { return true; } } } public function passwordResetCheck() { if (isset($_SESSION['username'])) { if ($_SESSION['resetPassword']) { //$this->redirect('/admin/password.php?reset'); echo "<script type='text/javascript'>window.location.href = '/admin/password.php?reset';</script>"; exit(); } } } public function redirect($url) { header("location: $url"); exit('Should have redirected'); } public function logout() { session_unset(); // unset $_SESSION variable for the run-time session_destroy(); // destroy session data in storage return true; } public function getUsernames($uname) { $stmt = $this->db->prepare("SELECT username FROM result_internaluser WHERE username = :uname"); $stmt->execute(array(':uname' => $uname)); return $stmt->fetch(PDO::FETCH_ASSOC); } public function changePassword($username, $password, $newPassword) { //TODO: Check if password is equal to old try { $stmt = $this->db->prepare("SELECT * FROM result_internaluser WHERE username = :uname LIMIT 1"); $stmt->execute(array(':uname' => $username)); $adminRow = $stmt->fetch(PDO::FETCH_ASSOC); if ($stmt->rowCount() == 1 && $adminRow['isDeleted'] == 0) { if (password_verify($password, $adminRow['password'])) { $stmt2 = $this->db->prepare("UPDATE result_internaluser SET password = :password, resetPassword = 0 WHERE username = :username"); $stmt2->execute(array(':password' => password_hash($newPassword, PASSWORD_DEFAULT), ':username' => $username)); $this->logout(); $this->redirect('/'); } } } catch (PDOException $e) { echo $e->getMessage(); } } public function changePasswordForUser($admin_username, $password, $user_id, $newPassword) { try { $stmt = $this->db->prepare("SELECT * FROM result_internaluser WHERE username = :uname LIMIT 1"); $stmt->execute(array(':uname' => $admin_username)); $adminRow = $stmt->fetch(PDO::FETCH_ASSOC); if ($stmt->rowCount() == 1 && $adminRow['isDeleted'] == 0) { if (password_verify($password, $adminRow['password'])) { $stmt2 = $this->db->prepare("UPDATE result_internaluser SET password = :password, resetPassword = 1 WHERE id = :id"); $stmt2->execute(array(':password' => password_hash($newPassword, PASSWORD_DEFAULT), ':id' => $user_id)); $this->redirect('/admin/show.php?admin=' . $user_id . '&success-code=true'); } else{ return false; } } else { return false; } } catch (PDOException $e) { echo $e->getMessage(); } } public function forceChangePasswords() { try { $stmt = $this->db->prepare("SELECT id FROM result_internaluser"); $stmt->execute(); $users = $stmt->fetch(PDO::FETCH_ASSOC); foreach ($users as $user) { $updateStmt = $this->db->prepare("UPDATE result_internaluser SET resetPassword = 1"); $updateStmt->execute(); } $this->logout(); } catch (PDOException $e) { echo $e->getMessage(); } } public function forceChangePasswordForUser($id) { try { $updateStmt = $this->db->prepare("UPDATE result_internaluser SET resetPassword = 1 WHERE id = :id"); $updateStmt->execute(array(":id" => $id)); } catch (PDOException $e) { echo $e->getMessage(); } } public function getAdmin($id) { try { $stmt = $this->db->prepare("SELECT username, name, isDeleted, admin_level, lastLogin FROM result_internaluser WHERE id = :id"); $stmt->execute(array(":id" => $id)); $admin = $stmt->fetch(PDO::FETCH_BOTH); return $admin; } catch (PDOException $e) { echo $e->getMessage(); } } public function getAllAdmins() { try { $stmt = $this->db->prepare("SELECT username, name, isDeleted, admin_level, lastLogin, id FROM result_internaluser ORDER BY name, username"); $stmt->execute(); $admin = $stmt->fetchall(); return $admin; } catch (PDOException $e) { echo $e->getMessage(); } } public function saveAdmin($id, $name, $deleted, $level) { try { $stmt = $this->db->prepare("UPDATE result_internaluser SET name = :name, isDeleted = :deleted, admin_level = :level WHERE id = :id"); $stmt->execute(array(":id" => $id, ":name" => $name, ":deleted" => $deleted, ":level" => $level)); } catch (PDOException $e) { echo $e->getMessage(); } } public function getAnniversaryYears() { try { $stmt = $this->db->prepare("SELECT year FROM result_anniversary;"); $stmt->execute(); return $stmt->fetchall(); } catch (PDOException $e) { echo $e->getMessage(); } } public function getAnniversaryUsers($years) { try { $stmt = $this->db->prepare("SELECT shooterId, fullname, memberDate, id FROM `result_users` WHERE `memberDate` in (" . $years . ") AND isDeleted = 0;"); $stmt->execute(); return $stmt->fetchall(); } catch (PDOException $e) { echo $e->getMessage(); } } } ?>��show.php��0000644��00000000232�15233463225�0006237 0��ustar�00��<?php if (isset($_GET['admin'])) { include ('profile.php'); } else { include ('admin-list.php'); } ?> <?php include('../static/footer.php'); ?>��password.php��0000644��00000004366�15233463225�0007135 0��ustar�00��<?php require_once('../include.php'); $admin = new admin($db); $log = new log($db); if (!$admin->admin_level(0)) { header("location: /static/401.php"); die(); } if (isset($_POST['resetall'])) { $admin->forceChangePasswords(); $log->addLog($_SESSION['userId'], "Alle passwords er blevet sat til ændring", "Password", null); } if (isset($_POST['change'])) { $admin->changePassword($_SESSION['username'], $_POST['password'], $_POST['newpassword']); $log->addLog($_SESSION['userId'], 'Bruger har ændret sit egent password', 'Password', null); } include('../static/header.php'); if (isset($_GET['reset'])) { echo '<span class="badge badge-pill badge-danger" style="background-color: red; font-size: large">Du skal ændre dit password før du kan forsætte!</span>'; } ?> <h2>Password håndtering</h2> <div style="width: 100%;"> <div style="float:left; width: 80%"> <h3>Ændre dit egent password</h3> <form method="post" style=""> <table> <col width="100"> <col width="80"> <tr> <td>Brugernavn</td> <td><input type="text" name="username" value="<?php echo $_SESSION['username'] ?>" readonly> </td> </tr> <tr> <td>Password</td> <td><input type="password" name="password" required></td> </tr> <tr> <td>Nyt password</td> <td><input type="password" name="newpassword" required></td> </tr> </table> <button name="change"> Ændre password </button> </form> </div> <div style="float:right;"> <?php if ($admin->admin_level(1)) { ?> <form method="post"> <button name='resetall' value='true'>Nulstil alle passwords ved næste login</button> </form> <?php } ?> </div> </div> <div style="clear:both"></div> <?php include('../static/footer.php'); ?>��consent-form.php��0000644��00000010416�15233463225�0007676 0��ustar�00��<?php require_once('../include.php'); $admin = new admin($db); $user = new user($db); include('../config.php'); include('consent.php'); $admin->passwordResetCheck(); if (!$admin->admin_level(0)) { header("location: /static/401.php"); die(); } if (isset($_POST['consentButton'])) { getConsent($_POST['name'], $_POST['adress'], $_POST['zip'], $_POST['mail'], $_POST['phone'], $_POST['date'], $_POST['year'], $logoName, $companySlogan, $companyLink, $companyName); } $profile = $user->getUser($_GET['user']); include('../static/header.php'); ?> <div class="container"> <div class="left-half-consent"> <h2>Samtykkeform for <u><a href="/user/profile.php?user=<?php echo $profile[0] ?>"><?php echo $profile[3] ?></a></u> </h2> <div style="position: fixed"> <table> <form method="post"> <tr> <td>Navn:</td> <td style="text-indent: 15px"><input type="input" value="<?php echo $profile[3] ?>" style="width:100%" name="name"> </td> </tr> <tr> <td>Adresse:</td> <td style="text-indent: 15px"><input type="input" value="<?php echo explode(',', $profile[4])[0] ?>" style="width:100%" name="adress"> </td> </tr> <tr> <td>Postnr. og by:</td> <td style="text-indent: 15px"><input type="input" value="<?php echo ltrim(explode(',', $profile[4])[1], ' ') ?>" style="width:100%" name="zip"> </td> </tr> <tr> <td>Mail:</td> <td style="text-indent: 15px"><input type="input" value="<?php echo $profile[6] ?>" style="width:100%" name="mail"> </td> </tr> <tr> <td>Telefon:</td> <td style="text-indent: 15px"><input type="input" value="<?php if (strlen($profile[9]) == 8) { $parts = str_split($profile[9], $split_length = 4); echo '(+45) ' . $parts[0] . ' ' . $parts[1]; } else { echo $profile[9]; } ?>" style="width:100%" name="phone"> </td> </tr> <tr> <td>Dato:</td> <td style="text-indent: 15px"><input type="input" value="<?php echo date("d-m-Y") ?>" style="width:100%" name="date"></td> </tr> <tr> <td>År:</td> <td style="text-indent: 15px"><input type="input" value="<?php echo date("Y") ?>" style="width:100%" name="year"> </td> </tr> <tr> <td> <button name="consentButton" style="float: right"> Udfyld samtykke </button> </td> </tr> </form> </table> </div> </div> <div class="right-half-consent"> <?php if (is_file('../static/profile-picture/' . $profile[0] . '.jpg') && file_exists('../static/profile-picture/' . $profile[0] . '.jpg')) { ?> <img src="<?php echo '../static/profile-picture/' . $profile[0] . '.jpg' ?>" style="height: 150px;"/> <?php } ?> </div> </div> <div style="clear:both"></div> <?php include('../static/footer.php'); ?> ��statistic/private.php��0000644��00000002267�15233463225�0010752 0��ustar�00��<?php include_once('/include.php'); $event = new event($db); $admin = new admin($db); $admin->passwordResetCheck(); include('../static/header.php'); $dates = $event->getEventDates(); $arr1 = ['2018-01-04' => 4,'2018-01-06' => 6]; $arr2 = ['2018-01-06' => 2]; $arr = []; foreach($dates as $date) { $arr[$date] = [$arr1[$date], $arr2[$date]]; } ?> <pre> <?php var_dump($arr); ?> </pre> <!DOCTYPE html> <html> <script src="https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.5.0/Chart.min.js"></script> <body> <canvas id="myChart" style="width:100%;max-width:600px"></canvas> <script> var xValues = <?php echo '[' . implode(",",$dates) . ']'; ?>; new Chart("myChart", { type: "line", data: { labels: xValues, datasets: [{ data: [860,1140,1060,1060,1070,1110,1330,2210,7830,2478], borderColor: "red", fill: false }, { data: [1600,1700,1700,1900,2000,2700,4000,5000,6000,7000], borderColor: "green", fill: false }, { data: [300,700,2000,5000,6000,4000,2000,1000,200,100], borderColor: "blue", fill: false }] }, options: { legend: {display: false} } }); </script> ��private.php��0000644��00000002271�15233463225�0006736 0��ustar�00��<?php include_once('../include.php'); $event = new event($db); $admin = new admin($db); $admin->passwordResetCheck(); include('../static/header.php'); $dates = $event->getEventDates(); $arr1 = ['2018-01-04' => 4,'2018-01-06' => 6]; $arr2 = ['2018-01-06' => 2]; $arr = []; foreach($dates as $date) { $arr[$date] = [$arr1[$date], $arr2[$date]]; } ?> <pre> <?php var_dump($arr); ?> </pre> <!DOCTYPE html> <html> <script src="https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.5.0/Chart.min.js"></script> <body> <canvas id="myChart" style="width:100%;max-width:600px"></canvas> <script> var xValues = <?php echo '[' . implode(",",$dates) . ']'; ?>; new Chart("myChart", { type: "line", data: { labels: xValues, datasets: [{ data: [860,1140,1060,1060,1070,1110,1330,2210,7830,2478], borderColor: "red", fill: false }, { data: [1600,1700,1700,1900,2000,2700,4000,5000,6000,7000], borderColor: "green", fill: false }, { data: [300,700,2000,5000,6000,4000,2000,1000,200,100], borderColor: "blue", fill: false }] }, options: { legend: {display: false} } }); </script> ��logout.php��0000644��00000000442�15233463225�0006573 0��ustar�00��<?php require_once('../include.php'); require_once('Class.admin.php'); $admin = new admin($db); if(!$admin->admin_level(0)) { $admin->redirect('./login.php'); } if(isset($_GET['logout']) && $_GET['logout']=="true") { $admin->logout(); $admin->redirect('/admin/login.php'); } ?>��subscription-paid.php��0000644��00000006773�15233463225�0010736 0��ustar�00��<?php require_once('../include.php'); error_reporting(0); $admin = new admin($db); $admin->passwordResetCheck(); $user = new user($db); if (!$admin->admin_level(0)) { header("location: /static/401.php"); die(); } $stmt = $db->prepare("SELECT cpr, shooterId, fullname, adress, birthday, phone, email, subscriptionPaid, ownWeapon, id FROM result_users WHERE subscriptionPaid = 1 AND isDeleted != 1"); $stmt->execute(); if (isset($_POST['reset'])) { $stmt = $db->prepare("SELECT id FROM result_users WHERE subscriptionPaid = 1"); $stmt->execute(); foreach ($stmt->fetchAll() as $row) { $user->updateSubcription($row[0], 0); } $admin->redirect('/admin/subscription.php'); } if ($_POST) { if (isset($_POST['cross'])) { $user->updateSubcription($_POST['cross'], 1); } if (isset($_POST['checkmark'])) { $user->updateSubcription($_POST['checkmark'], 0); } $admin->redirect('/admin/subscription.php'); } include('../static/header.php'); ?> <style> div.container { width: 100%; } </style> <div class="container"> <div class="row"> <div class="col-lg-12"> <h2>Betalte kontingenter</h2> <?php if ($admin->admin_level(1)) { ?> <form method="post"> <button name='reset' value='true'>Nulstil alle</button> </form> <?php } ?> <table class="table-bordered" cellspacing="0" width="100%"> <thead> <tr> <th>CPR</th> <th>Skyttenummer</th> <th>Navn</th> <th>Adresse</th> <th>Fødselsdag</th> <th>Telefon</th> <th>Email</th> <th>Kontingent betalt</th> <th>Ejer våben</th> </tr> </thead> <tbody> <?php foreach ($stmt->fetchAll() as $row) { $birthday = date_format(new DateTime($row[4]), 'd-m-Y'); echo "<tr>"; echo "<td>" . decrypt($row[0], $encryptKey) . "</td>"; echo "<td><a href='/user/show.php?user=$row[9]'>$row[1]</a></td>"; echo "<td><a href='/user/show.php?user=$row[9]'>$row[2]</a></td>"; echo "<td>$row[3]</td>"; echo "<td>$birthday</td>"; echo "<td>$row[5]</td>"; echo "<td>$row[6]</td>"; echo "<form method='POST'>"; if ($row[7] == 1) { echo "<td align='center'><button style=\"background-color: white;\" name='checkmark' value='$row[9]'><img src='/static/checkmark.jpeg' alt='Ja' width='40'></button></td>"; } else { echo "<td align='center'><button style=\"background-color: white;\" name='cross' value='$row[9]'><img src='/static/red_cross.jpg' alt='nej' width='40'></button></td>"; } echo "</form>"; if ($row[8] != 0) { echo "<td align='center'><img src='/static/checkmark.jpeg' alt='Ja' width='40'></td>"; } else { echo "<td align='center'><img src='/static/red_cross.jpg' alt='nej' width='40'></td>"; } echo "</tr>"; echo "</tbody>"; } ?> </table> </div> </div> </div>��new.php��0000644��00000006067�15233463225�0006064 0��ustar�00��<?php require_once('../include.php'); $admin = new admin($db); $admin->passwordResetCheck(); $log = new log($db); if (!$admin->admin_level(1)) { $admin->redirect("/"); } if (isset($_POST['txt_uname'])) { $uname = trim($_POST['txt_uname']); $upass = trim($_POST['txt_upass']); $name = $_POST['txt_name']; $level = $_POST['level']; if ($uname == "") { $error[] = "provide username !"; } else if ($upass == "") { $error[] = "provide password !"; } else if (strlen($upass) < 6) { $error[] = "Password must be atleast 6 characters"; } else if (strlen($name) == 0) { $error[] = "Must have a name"; } else if ($level < 0) { $error[] = "Level must be a positiv number"; } else { try { $row = $admin->getUsernames($uname); if ($row['username'] == $uname) { $error[] = "Sorry username already in use"; } else { if ($admin->register($uname, $upass, $name, $level)) { $comment = "Ny admin oprettet.<br />Brugernavn: " . $uname . "<br/>Navn: $name"; $log->addLog($_SESSION['userId'], $comment, "Admin", null); $admin->redirect('/'); } else { print "test"; } } } catch (PDOException $e) { echo $e->getMessage(); } } } include('../static/header.php'); ?> <link href="../static/bootstrap/css/bootstrap.min.css" rel="stylesheet"> <form method="post"> <h2>Opret ny admin</h2> <hr/> <?php if (isset($error)) { foreach ($error as $error) { ?> <div class="alert alert-danger"> <i class="glyphicon glyphicon-warning-sign"></i>   <?php echo $error; ?> </div> <?php } } else if (isset($_GET['joined'])) { ?> <div class="alert alert-info"> <i class="glyphicon glyphicon-log-in"></i>   Successfully registered <a href='/user/index.php'>login</a> here </div> <?php } ?> <div class="form-group"> <input type="text" class="form-control" name="txt_name" placeholder="Fullname"/> </div> <div class="form-group"> Admin level: <input type="number" class="form-control" name="level" placeholder="" value="0"/> </div> <div class="form-group"> <input type="text" class="form-control" name="txt_uname" placeholder="Enter Username" value="<?php if (isset($error)) { echo $uname; } ?>"/> </div> <div class="form-group"> <input type="password" class="form-control" name="txt_upass" placeholder="Enter Password"/> </div> <div class="clearfix"></div> <hr/> <div class="form-group"> <button type="submit" class="btn btn-block btn-primary" name="btn-signup"> <i class="glyphicon glyphicon-open-file"></i> SIGN UP </button> </div> <br/> <label><a href="/admin/login.php">Sign In</a></label> </form>��admin-list.php��0000644��00000004677�15233463225�0007341 0��ustar�00��<?php include('../include.php'); $admin = new admin($db); $admin->passwordResetCheck(); if (!$admin->admin_level(1)) { $admin->redirect('/static/401.php'); } if (isset($_POST['resetall'])) { $admin->forceChangePasswords(); $log->addLog($_SESSION['userId'], "Alle passwords er blevet sat til ændring", "Password", null); } include('../static/header.php'); ?> <h2>Admin list</h2> <div class="container"> <div class="row"> <div style="float:right;"> <?php if ($admin->admin_level(1)) { ?> <form method="post"> <button name='resetall' value='true'>Nulstil alle passwords ved næste login</button> </form> <?php } ?> </div> <table id="userTable" class="table-bordered" cellspacing="0" width="100%"> <thead> <tr> <th>Brugernavn</th> <th>Navn</th> <th>Slettet</th> <th>Admin level</th> <th>Sidste login</th> </tr> </thead> <tfoot> <tr> <th>Brugernavn</th> <th>Navn</th> <th>Admin level</th> <th>Sidste login</th> </tr> </tfoot> <tbody> <?php foreach ($admin->getAllAdmins() as $user) { ?> <tr> <td><a href="/admin/show.php?admin=<?php echo $user[5]; ?>"><?php echo $user[0]; ?></a></td> <td><a href="/admin/show.php?admin=<?php echo $user[5]; ?>"><?php echo $user[1]; ?></a></td> <td> <?php if ($user[2] == 1) { echo "Ja"; } else { echo "Nej"; } ?> </td> <td><?php echo $user[3]; ?></td> <td><?php echo $user[4]; ?></td> </tr> <?php } ?> </tbody> </table> </div> </div> </div> <script> $(document).ready(function () { $('#userTable').DataTable(); }); </script>��consent.php��0000644��00000007176�15233463225�0006746 0��ustar�00��<?php function getConsent($profile, $logoName, $companySlogan, $companyLink, $companyName) { $pdf = new PDF(); $header = utf8_decode("Samtykke til brug af portrætbilleder i Foreningen"); $section = 'Samtykke til brug af portrætbilleder i Foreningen <br /><br />' . 'Situationsbilleder kan offentliggøres uden samtykke i medfør af persondataloven.<br />Derimod kræver det samtykke at offentliggøre portrætbilleder, hvilket er baggrunden for denne samtykkeerklæring. <br /><br />' . 'Med virkning fra i dag giver jeg, <u>' . $profile[3] . '</u>, som medlem af foreningen ' . $companyName . ', samtykke til, at foreningen må offentliggøre portrætbilleder af mig med henblik på at beskrive foreningslivet, herunder hold, stævner, arrangementer, resultater og events. <br /><br />' . 'Billederne kan offentliggøres på forskellige medieplatforme, som foreningens hjemmeside og Facebookside. Billederne vil kun blive udleveret til ekstern brug med særskilt samtykke. <br /><br />' . 'Samtykket kan til enhver tid tilbagekaldes ved henvendelse eller meddelelse til foreningens PR-kontaktperson eller til bestyrelsesformanden.'; // First page $pdf->AddPage(); $pdf->Image('../static/' . $logoName, 175, 7, 20, 0, ''); $pdf->SetFont('Times', 'B', 20); $pdf->SetTextColor(0, 0, 255); $pdf->Write(5, $header); // Section 1 $pdf->SetFont('Times', '', 12); $pdf->SetTextColor(0, 0, 0); $pdf->SetXY(10, 30); $pdf->WriteHTML(utf8_decode($section)); $pdf->SetXY(10, 110); $pdf->SetFont('Times', 'U', 16); $pdf->Write(5, "Medlemmets oplysninger"); $pdf->SetFont('Times', '', 12); $pdf->SetXY(10, 120); $pdf->Write(5, "Navn"); $pdf->SetFont('Times', 'U', 12); $pdf->SetXY(35, 120); $pdf->Write(5, utf8_decode($profile[3])); $pdf->SetXY(10, 130); $pdf->SetFont('Times', '', 12); $pdf->Write(5, "Adresse"); $pdf->SetXY(35, 130); $pdf->SetFont('Times', 'U', 12); $pdf->Write(5, utf8_decode($profile[4])); $pdf->SetXY(10, 140); $pdf->SetFont('Times', '', 12); $pdf->Write(5, "Mail"); $pdf->SetXY(35, 140); $pdf->SetFont('Times', 'U', 12); $pdf->Write(5, $profile[6]); $pdf->SetXY(10, 150); $pdf->SetFont('Times', '', 12); $pdf->Write(5, "Telefon"); $pdf->SetXY(35, 150); $pdf->SetFont('Times', 'U', 12); $pdf->Write(5, $profile[9]); $pdf->SetXY(10, 160); $pdf->SetFont('Times', '', 12); $pdf->Write(5, "Dato"); $pdf->SetXY(35, 160); $pdf->SetFont('Times', 'U', 12); $pdf->Write(5, date("d-m-Y")); $pdf->SetXY(10, 170); $pdf->SetFont('Times', '', 12); $pdf->Write(5, utf8_decode("År")); $pdf->SetXY(35, 170); $pdf->SetFont('Times', 'U', 12); $pdf->Write(5, date("Y")); $pdf->SetXY(10, 200); $pdf->SetFont('Times', 'B', 12); $pdf->Write(5, "Medlemmets underskrift"); $pdf->SetFont('Times', '', 12); $pdf->SetXY(10, 215); $pdf->Write(5, "________ ______________________________________________________"); $pdf->SetXY(10, 220); $pdf->Write(5, " Dato Underskrift"); $pdf->SetFont('Times', 'B', 12); $pdf->SetXY(10, 235); $pdf->Write(5, utf8_decode("For medlemmer - Børn og unge")); $pdf->SetFont('Times', '', 12); $pdf->SetXY(10, 245); $pdf->Write(5, utf8_decode("Forældre/forældremyndighedsindehaver")); $pdf->SetXY(10, 260); $pdf->Write(5, "________ ______________________________________________________"); $pdf->SetXY(10, 265); $pdf->Write(5, " Dato Underskrift"); $pdf->Output(); } ?> ��

| ver. 1.4 | Github | . | PHP 7.4.33 | Генерация страницы: 0 | proxy | phpinfo | Настройка