Izgled cms kostura
Code:
- cms
-- base
--- tools.php
-- css
--- admin.css
--- content.css
--- global.css
--- index.css
--- menu.css
-- pages
--- skelet
---- footer.php
---- header.php
---- menu.php
--- admins.php
--- gallery.php
--- hello.php
--- index.php
--- logout.php
-- admins.php
-- gallery.php
-- hello.php
-- index.php
-- logout.php
file: cms/base/tools.php
Code:
<?php
/**
* File in which all the tool functions that we might use will be stored.
* @version 0.1 beta
* @author www.elitesecurity.org (written by member b0ris)
*/
/**
* @desc Function which will check if user is logged in. We will also set up full admin account here for purpose of loging in without
* messing around with data base (test account: administrator/demo (username/password) ).
* We will check for SQL injections later as we develop.
*/
function checkLogged($username, $pass){
if($username != "" && $pass != ""){
// Should be removed once we establish our account in database.
if($username == "administrator" && $pass == "demo") return true;
global $db;
$pass = md5($pass);
$res = $db->getrows("SELECT * FROM admins WHERE admin_name = '$username' AND admin_password = '$pass' ");
if(is_array($res)){
if($res[0]['admin_name'] == $username && $res[0]['admin_password'] == $pass ) return true;
else return false;
}else return false;
}
else return false;
}
?>
file: cms/css/admins.css
Code:
#a_row{
clear:both;
text-align:left;
margin:0 auto;
width:420px;
}
#a_column{
float:left;
width:200px;
border-bottom:1px solid gray;
padding:5px;
}
file: cms/css/content.css
Code:
#content{
clear:both;
text-align:left;
}
file: cms/css/global.css
Code:
body, td {
font-family: Verdana;
font-size:11px;
text-align:center;
background-color: #F2F2F2;
}
a {
text-decoration:none;
color:#FFB900;
}
a:hover {
color:silver;
}
file: cms/css/index.css
Code:
#table{
width:350px;
margin:0 auto;
border:1px solid black;
padding: 20px;
}
#row{
clear:both;
}
#label{
width:150px;
float:left;
}
#html{
width:200px;
float:left;
}
.button_flat{
border:1px solid #666666;
}
file: cms/css/menu.css
Code:
#menu{
clear:both;
margin: 0 auto;
text-align: left;
width:300px;
}
#menu_option{
float:left;
width:100px;
}
#menu A{
font-weight: bold;
}
file: cms/pages/skelet/footer.php
Code:
<?php echo "\n"; ?>
</body>
</html>
file" cms/pages/skelet/header.php
Code:
<?php
/**
* @desc Here we will include everything we need for any page. NOTE: Short tags are not used on purpose.
*/
// Not to copy all classes from our frontend we will just move back and use same classes we use for frontend.
// Including all the classes we need to display a page. Instead of including this classes one by one each time
// we could also use _autoload method which php provides
include "./../base/class.urlhandler.php";
include "./../base/class.db.php";
include "./../base/class.session.php";
include "./base/tools.php";
// Creating instance of urlHandler which we will use later.
$url = new urlHandler();
// Creating instance of db (connection to data base)
if(!$db = new DB("localhost", "root", "", "elitesecurity")){ echo "Could not connect to database!";exit(1);}
// Creating instance of session and starting up the session (note: session must start before any display happens.
// Be sure that you dont have enter (\n) as startup char. This can create errors.)
$session = new Session();
$session->startSession();
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<meta http-equiv="Expires" content="Fri, Jan 01 1900 00:00:00 GMT">
<meta http-equiv="Pragma" content="no-cache">
<meta http-equiv="Cache-Control" content="no-cache">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta http-equiv="content-language" content="sr">
<meta name="author" content="elitesecurity">
<meta name="generator" content="Elitesecurity CMS <boris vujicic>">
<meta name="description" content="Home page, test page for basic CMS">
<meta name="keywords" content="">
<meta name="creation-date" content="09/20/2007">
<meta name="robots" content="nofollow" />
<title>CMS</title>
<link rel="stylesheet" type="text/css" href="./css/global.css">
<link rel="stylesheet" type="text/css" href="./css/menu.css">
<link rel="stylesheet" type="text/css" href="./css/content.css">
<link rel="stylesheet" type="text/css" href="./css/index.css">
<!-- We will arange display of apropriet css for selected page later. -->
<link rel="stylesheet" type="text/css" href="./css/admins.css">
</head>
<body>
file: cms/pages/skelet/menu.php
Code:
<?php
/**
* @desc Creating menu. Latter we will create dynamic page creation.
*/
$logged = $session->getValue("logged");
if($logged == 1){
?>
<div id="menu">
<div id="menu_option"><a href="admins.php">Admins</a></div>
<div id="menu_option"><a href="gallery.php">Gallery</a></div>
<div id="menu_option"><a href="logout.php">Log out</a></div>
</div>
<br/><br/>
<?php }?>
file: cms/pages/admins.php
Code:
<?php
/**
* Later we will simplify display of this page and add control for permissions (who and how can access this page).
*/
?>
<div id ="content">
<p>Administrate User accounts for backend.</p><br/>
<?php
// Catching method and id (if ones are set) which is activated for this page
$method = $url->getValue("method");
$id = $url->getValue("id");
// If method is set and id is numeric, then we should do something (check for type of metod and execute)
if($method != "" && is_numeric($id)){
// Delete administrator
if($method == "delete") $db->query("DELETE FROM admins WHERE admin_id = $id");
// Edit administrator
if($method == "edit" || $method == "add"){
$admin = $db->getrows("SELECT * FROM admins WHERE admin_id = $id");
$content = "
<form action=\"admins.php\" method=\"post\">
<div id=\"row\">
<div id=\"label\"> Admin Name: </div>
<div id=\"html\"> <input type=\"text\" name=\"admin_name\" value=\"{$admin[0]['admin_name']}\" /> </div>
</div>
<div id=\"row\">
<div id=\"label\"> Password: </div>
<div id=\"html\"> <input type=\"password\" name=\"pass\" value=\"\" /> </div>
</div>
<div id=\"row\">
<div id=\"label\"> Repeat Password: </div>
<div id=\"html\"> <input type=\"password\" name=\"repass\" value=\"\" /> </div>
</div>
<div id=\"row\">
<input type=\"hidden\" value=\"{$admin[0]['admin_id']}\" name=\"id\"/>
<input type=\"hidden\" value=\"$method\" name=\"method\"/>
<input type=\"submit\" value=\"Make Change\" class=\"button_flat\" />
</div>
</form>
";
echo $content;
}
}
// Updating member
if($method == "edit"){
// Getting administrator name, password and repeated password
$admin_name = $url->getValue("admin_name");
$pass = $url->getValue("pass");
$repass = $url->getValue("repass");
// Checking if everything is correct
if($admin_name != "" && $pass == $repass){
if($pass == "") $db->query("UPDATE admins SET admin_name = '$admin_name' WHERE admin_id = $id");
else{
$pass = md5($pass);
$db->query("UPDATE admins SET admin_name = '$admin_name', admin_password = '$pass' WHERE admin_id = $id");
}
}
}
// Add member
if($method == "add"){
// Getting administrator name, password and repeated password
$admin_name = $url->getValue("admin_name");
$pass = $url->getValue("pass");
$repass = $url->getValue("repass");
// Inserting member into databse
if($admin_name != "" && $pass == $repass && $pass != ""){
$pass = md5($pass);
$db->query("INSERT INTO admins(admin_name, admin_password) VALUES ('$admin_name', '$pass')");
}
}
// Lets select all members and display them for managing
$admins = $db->getrows("SELECT * FROM admins");
if(is_array($admins)){
echo "<div id=\"a_row\"><div id=\"a_column\" >Admin name</div><div id=\"a_column\"> <a href=\"admins.php?method=add&id=0\">add new</a> </div></div>";
foreach($admins as $key => $value){
echo "<div id=\"a_row\">";
echo "
<div id=\"a_column\" >{$admins[$key]['admin_name']}</div>
<div id=\"a_column\">
<a href=\"admins.php?method=edit&id={$admins[$key]['admin_id']}\">edit</a>
<a href=\"admins.php?method=delete&id={$admins[$key]['admin_id']}\">delete</a>
</div>";
echo "</div>";
}
}else{
}
?>
</div>
file: cms/pages/gallery.php
Code:
<?php
/**
* Administration of gallery, done really simple. We will build upon this later.
*/
?>
<div id ="content">
<p>Administrate Gallery.</p>
<?php
echo '<p><a href="gallery.php?mode=add">Add new photo to gallery.</a></p>';
echo '<p>Gallery</p>';
// Catching mode and id of photo (if one is set). Remember we are using class UrlHandler so there is no reason to think
// which way (POST, GET) data is being transferred to us.
$mode = $url->getValue("mode");
$id = $url->getValue("id");
// If mode is delete, lets delete some pictures.
if($mode == "delete"){
$gallery = $db->getrows("SELECT * FROM pictures WHERE picture_id = $id");
$db->query("DELETE FROM pictures WHERE picture_id = $id");
// Here we should add some checkups if this picture really exists at the time.
// We will build upon this later.
unlink("./../uploads/pictures/{$gallery[0]['picture_name']}");
}
// If we want to add new picture? Lets display a form for adding one
if($mode == "add"){
echo '
<form enctype="multipart/form-data" action="gallery.php" method="POST">
<input type="hidden" name="MAX_FILE_SIZE" value="100000" />
Choose a file to upload: <input name="picture" type="file" /><br />
<input type="hidden" name="mode" value="upload" />
<input type="submit" value="Upload Picture" />
</form>
';
}
// If picture is being uploaded, lets catch that bytes (picture) and do something with it (like store it :) )
// Here no checkup for right format will be done.
if($mode == "upload"){
// Lets set the path where picture will go.
$target_path = "./../uploads/pictures/";
// Lets attach the name of the picture to that path.
$target_path = $target_path . basename( $_FILES['picture']['name']);
// Lets copy our photo (file) on location where we want it to go. Is it moved?
if(move_uploaded_file($_FILES['picture']['tmp_name'], $target_path)) {
// Yes it is moved. Lets add this into database.
$db->query("INSERT INTO pictures(picture_name) VALUES ('{$_FILES['picture']['name']}')");
echo "The file ". basename( $_FILES['picture']['name'])." has been uploaded";
} else{
// No. We should handle this error in some way.
echo "There was an error uploading the file, please try again!";
}
}
// Lets take all the pictures from database and display them.
$gallery = $db->getrows("SELECT * FROM pictures");
foreach($gallery as $key => $value){
if(($key+1)%5 == 0)
echo "<div style=\"clear:both;\"> </div>";
echo "
<div style=\"float:left; border:1px solid black;\">
<img src=\"./../uploads/pictures/{$gallery[$key]['picture_name']}\" width=\"70px\" style=\"border:1px solid #cccccc\"><br/>
<a href=\"gallery.php?mode=delete&id={$gallery[$key]['picture_id']}\" >delete</a> | <a href=\"./../uploads/pictures/{$gallery[$key]['picture_name']}\" target=\"_BLANK\">view</a>
</div>";
}
?>
</div>
file: cms/pages/hello.php
Code:
<?php
// Checking if user is logged on
$logged = $session->getValue("logged");
if($logged == 1){
?>
<div id="content">
<p>
Welcome to our basic CMS. We will keep on improving this CMS step by step.
</p>
</div>
<?php }?>
file: cms/pages/home.php
Code:
<?php
/**
* @desc Here we will atempt to login and show some content if we are logged in :)
*/
// Getting username and password.
$username = $url->getValue("username");
$pass = $url->getValue("pass");
// Now we will check if user exists in database and loog him in if he exists.
if($username != "" && $pass != ""){
if(checkLogged($username, $pass)){
$session->removeValue("logged");
$session->addValue("logged", 1);
}
else {
$session->removeValue("logged");
$session->addValue("logged", 0);
}
}
$logged = $session->getValue("logged");
if($logged != 1){
?>
<form action="index.php" method="post">
<div id="content">
<div id="table">
<div id="row">
<div id="label" >Username: </div>
<div id="html" > <input type="text" name="username" /> </div>
</div>
<div id="row">
<div id="label" >Password: </div>
<div id="html" > <input type="password" name="pass" /> </div>
</div>
<div id="row"> <input type="submit" value="Login" class="button_flat"/> </div>
</div>
</div>
</form>
<?php }else{ ?>
You are logged :)<br/>
In 3 seconds you will be redirected to backend. If that does not happend click on the link below.<br/>
<a href="hello.php">Backend</a>
<meta http-equiv="refresh" content="3;url=hello.php">
<?php } ?>
file: cms/pages/logout.php
Code:
<?php
// Lets remove the login flag, and refresh this content.
$session->removeValue("logged");
?>
<div id="content">
<p>Thank you for using this CMS.</p>
</div>
<meta http-equiv="refresh" content="3;url=index.php">
file: cms/admins.php
Code:
<?php
include "./pages/skelet/header.php";
include "./pages/skelet/menu.php";
include "./pages/admins.php";
include "./pages/skelet/footer.php";
?>
file: cms/gallery.php
Code:
<?php
include "./pages/skelet/header.php";
include "./pages/skelet/menu.php";
include "./pages/gallery.php";
include "./pages/skelet/footer.php";
?>
file: cms/hello.php
Code:
<?php
include "./pages/skelet/header.php";
include "./pages/skelet/menu.php";
include "./pages/hello.php";
include "./pages/skelet/footer.php";
?>
file: cms/index.php
Code:
<?php
include "./pages/skelet/header.php";
include "./pages/home.php";
include "./pages/skelet/footer.php";
?>
file: cms/logout.php
Code:
<?php
include "./pages/skelet/header.php";
include "./pages/logout.php";
include "./pages/skelet/footer.php";
?>
---------------------------------------------------------------------
Just do it.
Re: pomoc naprednom pocetniku,tj. preporuka neke knjige