// zalozylem sobie konto nwm...
To koncepcja panelu w 1 pliku. plik admin.php
<?php
require_once "cTemplate.php";
require_once "db_inteface.php";
$page = new cTemplate;
$dbase = new db_interface("kpz", "root", "root", "localhost");
if (isset($_POST['haslo'])&&isset
($_POST['login'])) {
if ($_POST['haslo'] === "haslo1"&&$_POST['login'] === "haslo")
{
$_SESSION['zalogowany'] = 1;
$_SESSION['czas'] = time(); }
else
{
$login_form = new cTemplate;
$login_form->assign['msg'] = "podales bledne haslo!<br>sprobuj ponownie";
$page->assign['main'] = $login_form->parse("templates/login.html");
echo $page->parse("templates/index.html"); }
}
if (isset($_SESSION['zalogowany'])&&isset
($_SESSION['czas'])&&($_SESSION['zalogowany']===1
)) {
if (time()-$_SESSION['czas'] < 1800
) {
$_SESSION['czas'] = time(); $page->assign['main'] = "jestes zalogowany<br><br>";
if(!isset($_GET['action'])) {
$_GET['action'] = "";
}
switch ($_GET['action'])
{
case "nowy_news":
$news_form = new cTemplate;
$page ->assign['main'] .=
$news_form->parse("templates/news_form.html");
break;
case "usun_newsa":
{
$dbase->query("
DELETE FROM newsy
where id = ".$_GET['id'].";
");
$page->assign['main']
.= "<br>Usunięto newsa.<br><br>";
$page->assign['main'] .= "<a
href=\"?action=nowy_news\">Dodaj aktualnosc</a><br><br>";
$result = $dbase->get_query("
SELECT * FROM newsy
ORDER BY id DESC
LIMIT 0, 20
");
if ($result)
{
$news = new cTemplate;
echo '<div class="newsAktu"></div>'; foreach ($result as $record)
{
$news->assign['tytul'] = "<a
target=\"_blank\" href=\"index.php?action=pokaz&id=".$record['id']."\">".$record['tytul']."</a>";
$news->assign['data'] =
$record['data'];
$news->assign['usun'] = "<a
href=\"?action=usun_news&id=".$record['id']."\">Usun</a>";
$news->assign['edytuj'] = "<a
href=\"?action=edytuj_news&id=".$record['id']."\">Edytuj</a>";
$page->assign['main'] .=
$news->parse("templates/headadmin.html");
}
}
else $page->assign['main'] .= "brak
news'ow";
}
else $page->assign['main'] .= "<br>Nie podano
zadnego newsa<br>";
break;
case "usun_news":
{
$result = $dbase->get_query("
SELECT * FROM newsy
where id = ".$_GET['id'].";
");
if
($result)
{
$news = new cTemplate;
$news->assign['tytul'] = $result[0]['tytul'];
$news->assign['data'] = $result[0]['data'];
$news->assign['tresc'] = $result[0]['tresc'];
$news->assign['opcje'] = "Czy na pewno chcesz usunać tego newsa?<br>";
$news->assign['opcje'] .= "<a href=\"?action=usun_newsa&id=".$result[0]['id']."\">TAK</a> |";
$news->assign['opcje'] .= " <a href=\"admin.php\">NIE</a> ";
$page->assign['main'] .= $news->parse("templates/usunnews.html");
}
}
else $page->assign['main'] .= "<br>Nie podano
zadnego newsa<br>";
break;
?>
dalszy ciag...
<?php
case "modyfikuj":
{
$result =
$dbase->get_query("
SELECT * FROM
newsy
where id =
".$_GET['id'].";
");
if ($result)
{
if
(isset($_POST['tytul'])&&isset
($_POST['tresc'])) {
$dbase->query("
UPDATE newsy
data = '".$result[0]['data']."'
where id =".$result[0]['id'].";
");
$page->assign['main']
.= "<br>Zmodyfikowano newsa.<br><br>";
}
}
else $page->assign['main'] .=
"<br>Nie znaleziono newsa.<br><br>";
}
else $page->assign['main'] .= "Nie podano
newsa.";
$result = $dbase->get_query("
SELECT * FROM newsy
ORDER BY id DESC
LIMIT 0, 20
");
if ($result)
{
$news = new cTemplate;
echo '<div class="newsAktu"></div>'; foreach ($result as $record)
{
$news->assign['tytul'] = "<a
target=\"_blank\" href=\"index.php?action=pokaz&id=".$record['id']."\">".$record['tytul']."</a>";
$news->assign['data'] =
$record['data'];
$news->assign['usun'] = "<a
href=\"?action=usun_news&id=".$record['id']."\">Usun</a>";
$news->assign['edytuj'] = "<a
href=\"?action=edytuj_news&id=".$record['id']."\">Edytuj</a>";
$page->assign['main'] .=
$news->parse("templates/headadmin.html");
}
}
else $page->assign['main'] .= "brak
news'ow";
break;
case "edytuj_news":
{
$result = $dbase->get_query("
SELECT * FROM newsy
where id = ".$_GET['id'].";
");
if($result)
{
$news_form = new cTemplate;
$news_form->assign['tytul'] =
$result[0]['tytul'];
$news_form->assign['tresc'] =
$result[0]['tresc'];
$news_form->assign['id'] =
$result[0]['id'];
$page->assign['main'] =
$news_form->parse('templates/edit_news_form.html');
}
else $page->assign['main'] .= "Nie
odnaleziono newsa.";
}
else $page->assign['main'] .= "Nie podano newsa.";
break;
case "dodaj_news":
if (isset($_POST['tytul'])&&isset
($_POST['tresc'])) {
$dbase->query("
INSERT INTO newsy (tytul, tresc, data)
VALUES
");
$page->assign['main'] .= "<br>Dodano nowego
newsa.<br><br>";
$page->assign['main'] .= "<a
href=\"?action=nowy_news\">Dodaj aktualnosc</a><br><br>";
$result =
$dbase->get_query("
SELECT * FROM newsy
ORDER BY id DESC
LIMIT 0, 20
");
if ($result)
{
$news = new cTemplate;
echo '<div class="newsAktu"></div>'; foreach ($result as $record)
{
$news->assign['tytul'] = "<a
target=\"_blank\" href=\"index.php?action=pokaz&id=".$record['id']."\">".$record['tytul']."</a>";
$news->assign['data'] =
$record['data'];
$news->assign['usun'] = "<a
target=\"_blank\" href=\"index.php?action=usun_news&id=".$record['id']."\">Usun</a>";
$news->assign['edytuj'] = "<a
href=\"?action=edytuj_news&id=".$record['id']."\">Edytuj</a>";
$page->assign['main'] .=
$news->parse("templates/headadmin.html");
}
}
else $page->assign['main'] .= "brak news'ow";
}
else $page->assign['main'] .= "<br>Brak
danych<br><br>";
break;
default:
$page->assign['main'] .= "<a
href=\"?action=nowy_news\">Dodaj aktualnosc</a><br><br>";
$result = $dbase->get_query("
SELECT * FROM newsy
ORDER BY id DESC
LIMIT 0, 20
");
if ($result)
{
$news = new cTemplate;
echo '<div class="newsAktu"></div>'; foreach ($result as $record)
{
$news->assign['tytul'] = "<a
target=\"_blank\" href=\"index.php?action=pokaz&id=".$record['id']."\">".$record['tytul']."</a>";
$news->assign['data'] =
$record['data'];
$news->assign['usun'] = "<a
href=\"?action=usun_news&id=".$record['id']."\">Usun</a>";
$news->assign['edytuj'] = "<a
href=\"?action=edytuj_news&id=".$record['id']."\">Edytuj</a>";
$page->assign['main'] .=
$news->parse("templates/headadmin.html");
}
}
else $page->assign['main'] .= "brak
news'ow";
break;
}
}
else
{
$login_form = new cTemplate;
$login_form->assign['msg'] = "przekroczono czas bezczynnosci<br>zaloguj sie ponownie";
$page->assign['main'] = $login_form->parse("templates/login.html");
}
}
else
{
$login_form = new cTemplate;
$login_form->assign['msg'] = "podaj haslo";
$page->assign['main'] = $login_form->parse("templates/login.html");
}
echo $page->parse("templates/index.html");
?>
jak rozbil bym to na 2 pliki (index i news) to by mi nadpisalo echo $page->parse("templates/index.html"); jak wykasowal bym z index.php nie wyswietlo
by logowania, jak z news, to nie wyswietlolo by mi newsow itp.
a nie moge np. tylko sroda wsadzic do news bo wtedy nie bedzie w sesji i mi sie kazdy bedzie mogl wlamac (tak mi sie wydaje choc nie probowalem no ale raczej tak bedzie )
ma ktos jakis pomysł...?
chociaz moze posboje tak... bo jak bedzie oddielny include bez hasel do bazy ktore beda w glownym pliku to chyba wlamywacz nic nie zrobi?


?