Changeset 156 for trunk/admin

Timestamp:

05/09/06 00:12:50 (3 years ago)

Author:

michiel

Message:

Implemented users for a blog.
Authors can now decide to turn of anonymous comments.
This is a global setting. When activated authors can
choose per post wether anon comments are allowed.
This is disabled by default so only logged in users
can comment.

This patch includes a database update

Re #60

Files:

• trunk/admin/index.php (modified) (11 diffs)

trunk/admin/index.php

@@ -167 +167 @@
         global $db;
         if ($id==0) {
-                $post["id"]            = 0;
-                $post["title"]         = "post title";
-                $post["body"]          = "post body";
-                $post["date"]          = mktime();
-                $post["categories_id"] = 0;
-                $post["active"]        = 1;
-                $post["public"]        = 1;
-                $post["mail_comments"] = 1;
+                $post["id"]                = 0;
+                $post["title"]             = "post title";
+                $post["body"]              = "post body";
+                $post["date"]              = mktime();
+                $post["categories_id"]     = 0;
+                $post["active"]            = 1;
+                $post["public"]            = 1;
+                $post["mail_comments"]     = 1;
+                $post["allowanoncomments"] = 0;
         } else {
                 $res =& $db->query(sprintf("SELECT * FROM articles WHERE id = %d", $id));
@@ -272 +273 @@
                         <span class="log_author">public: <input type="checkbox" value="1" name="post[public]" <? if ($post["public"]) { echo "checked=\"checked\""; } ?> /></span>
                         <span class="log_author">aside: <input type="checkbox" value="1" name="post[aside]" <? if ($post["aside"]) { echo "checked=\"checked\""; } ?> /></span>
+                        <span class="log_author">anoncomments: <input type="checkbox" value="1" name="post[allowanoncomments]" <? if ($post["allowanoncomments"]) { echo "checked=\"checked\""; } ?> /></span>
                 </div>
         </div>
@@ -290 +292 @@
                 $r =& $db->query($sql);
                 $r->fetchInto($orig_post, DB_FETCHMODE_ASSOC);
-                $query  = sprintf("UPDATE articles SET title = '%s', body = '%s', categories_id = %d, active = %d, public = %d, aside = %d, mail_comments = %d",
+                $query  = sprintf("UPDATE articles SET title = '%s', body = '%s', categories_id = %d, active = %d, public = %d, aside = %d, mail_comments = %d, allowanoncomments = %d",
                         preg_quote(strip_tags($post["title"]), "'"),
                         preg_quote(_strip_tags($post["body"]), "'"),
@@ -297 +299 @@
                         $post["public"],
                         $post["aside"],
-                        $post["mail_comments"]
+                        $post["mail_comments"],
+                        $post["allowanoncomments"]
                 );
                 //if post was inactive, and now it's active, we don't update the "modified" fields in the database.
@@ -313 +316 @@
                 $query .= sprintf(" WHERE id = %d", $post["id"]);
         } else {
-                $query  = "INSERT INTO articles (title, body, authors_id, categories_id, date, active, public, aside, mail_comments, ping_sent, tb_uri)";
-                $query .= sprintf("VALUES ('%s', '%s', %d, %d, %d, %d, %d, %d, %d, %d, '%s')",
+                $query  = "INSERT INTO articles (title, body, authors_id, categories_id, date, active, public, aside, mail_comments, ping_sent, tb_uri, allowanoncomments)";
+                $query .= sprintf("VALUES ('%s', '%s', %d, %d, %d, %d, %d, %d, %d, %d, '%s', %d)",
                         preg_quote(strip_tags($post["title"]), "'"),
                         preg_quote(_strip_tags($post["body"]), "'"),
@@ -321 +324 @@
                         mktime(date("H"), date("i"), date("s"), $post["month"], $post["day"], $post["year"]),
                         $post["active"], $post["public"], $post["aside"], $post["mail_comments"], 0,
-                        preg_quote($post["tb_uri"], "'")
+                        preg_quote($post["tb_uri"], "'"), $post["allowanoncomments"]
                 );
         }
@@ -787 +790 @@
         }
 }
-
+//}}}------------------------------------
+//{{{ show_users(); Show registered users
+//---------------------------------------
+function show_users() {
+        global $db;
+        $res =& $db->query("SELECT * FROM blog_users ORDER BY username");
+        if (PEAR::isError($res)) {
+                die($res->getMessage());
+        }
+
+        ?><a href="./index.php?action=edit_author&amp;id=0">create new</a><?
+        while ($res->fetchInto($row, DB_FETCHMODE_ASSOC)) {
+                ?>
+                <div class="log_post">
+                        <div class="log_head">
+                                <span class="log_subject">
+                                        &nbsp;&nbsp;
+                                        <a href="?action=edit_user&amp;id=<?=$row["id"]?>">
+                                        <?=stripslashes($row["realname"])?>
+                                        <? if ($row["active"]) { ?>
+                                                (active)
+                                        <? } else { ?>
+                                                (inactive)
+                                        <? } ?>
+                                        </a>&nbsp;&nbsp;
+                                        <span class="log_cat">
+                                                loginname: <?=stripslashes($row["username"])?>
+                                        </span>
+                                </span>
+                        </div>
+                        <div class="log_foot">
+                        </div>
+                </div>
+                <?
+        }
+
+}
+//}}}-------------------------------------------------
+//{{{ edit_user($userid): show form to manipulate user
+//----------------------------------------------------
+function edit_user($userid) {
+        global $db;
+        if ($userid==0) {
+                $user["id"]       = 0;
+                $user["username"]    = "login";
+                $user["password"] = "";
+                $user["email"]    = "";
+                $user["realname"] = "";
+                $user["active"]   = 1;
+                $user["website"]  = "http://";
+        } else {
+                $res =& $db->query(sprintf("SELECT * FROM blog_users WHERE id = %d", $userid));
+                if (PEAR::isError($res)) {
+                        die($res->getMessage());
+                }
+                $res->fetchInto($user, DB_FETCHMODE_ASSOC);
+        }
+        if ($_REQUEST["error"]) {
+                echo "<font color=\"red\">".stripslashes(_strip_tags($_REQUEST["error"]))."</font>";
+        }
+        ?>
+        <form name="user" method="post" action="index.php">
+        <input type="hidden" name="action" value="save_user" />
+        <input type="hidden" name="user[id]" value="<?=$user["id"]?>" />
+        <input type="hidden" id="active" name="user[active]" value="<?=$user["active"]?>" />
+        <div class="log_post">
+                <div class="log_head">
+                        <span class="log_subject">
+                                <? if ($userid) { ?>
+                                        &nbsp;&nbsp;<?=stripslashes($user["username"])?>&nbsp;&nbsp;
+                                <? } else { ?>
+                                        &nbsp;&nbsp;login: <input type="text" name="user[username]" value="<?=stripslashes($user["username"])?>" />
+                                <? } ?>
+                        </span>
+                </div>
+                <div class="log_body">
+                        <span class="log_contents">
+                                <table border="0" cellspacing="0" cellpadding="0"><tr>
+                                        <td align="right">password:</td>
+                                        <td><input type="password" name="user[password]" /></td>
+                                </tr><tr>
+                                        <td align="right">password(repeat):</td>
+                                        <td><input type="password" name="user[password1]" /></td>
+                                </tr><tr>
+                                        <td align="right">email:</td>
+                                        <td><input type="text" name="user[email]" value="<?=stripslashes($user["email"])?>" /></td>
+                                </tr><tr>
+                                        <td align="right">website:</td>
+                                        <td><input type="text" name="user[website]" value="<?=stripslashes($user["website"])?>" /></td>
+                                </tr><tr>
+                                        <td align="right">full name: </td>
+                                        <td><input type="text" name="user[realname]" value="<?=stripslashes($user["realname"])?>" /></td>
+                                </tr></table>
+                        </span>
+                        <input type="submit" value="save" />
+                        <? if ($userid) { ?>
+                                <? if ($user["active"]) { ?>
+                                        <input type="button" value="disable" onClick="document.forms.user.active.value=0;document.forms.user.action.value='save_user';document.forms.user.submit();" />
+                                <? } else { ?>
+                                        <input type="button" value="enable" onClick="document.forms.user.active.value=1;document.forms.user.action.value='save_user';document.forms.user.submit();" />
+                                <? } ?>
+                                <input type="button" value="delete" onclick="del_user();" />
+                        <? } ?>
+                </div>
+                <div class="log_foot">
+                        <script language="Javascript1.2" type="text/javascript">
+                                function del_user() {
+                                        if (confirm('Are you sure you want to delete this user')) {
+                                                document.forms.user.action.value='delete_user';
+                                                document.forms.user.submit();
+                                        }
+                                }
+                        </script>
+                </div>
+        </div>
+        </form>
+        <?
+}
+//}}}-----------------------------------------------------
+//{{{ save_user($user): store new/altered user in database
+//--------------------------------------------------------
+function save_user($user) {
+        global $db;
+        if ($user["password"] && $user["password1"]) {
+                if ($user["password"] != $user["password1"]) {
+                        $error = "Passwords don't match. Please correct this error and try again.";
+                }
+        }
+        //make sure we are not inserting double loginnames
+        if (!$user["id"]) {
+                $res =& $db->query("SELECT COUNT(*) FROM blog_users WHERE username='".$user["username"]."'");
+                $res->fetchInto($count);
+                if ($count[0]) {
+                        $error = "Login already excists. Please correct this error and try again.";
+                }
+        }
+        if (!$error) {
+                if ($user["id"]) {
+                        $query = sprintf("UPDATE blog_users SET realname = '%s', email = '%s', website = '%s', active = %d",
+                                preg_quote(strip_tags($user["realname"]), "'"),
+                                preg_quote(strip_tags($user["email"]), "'"),
+                                preg_quote(strip_tags($user["website"]), "'"),
+                                $user["active"]
+                        );
+                        if (trim($user["password"])) {
+                                $query .= sprintf(", password = '%s'", trim(preg_quote(strip_tags($user["password"]), "'")));
+                        }
+                        $query .= sprintf(" WHERE id = %d", $user["id"]);
+                } else {
+                        $query = sprintf("INSERT INTO blog_users (password, realname, email, website, username, active) VALUES ('%s', '%s', '%s', '%s', '%s', %d)",
+                                preg_quote(strip_tags(trim($user["password"])), "'"),
+                                preg_quote(strip_tags($user["realname"]), "'"),
+                                preg_quote(strip_tags($user["email"]), "'"),
+                                preg_quote(strip_tags($user["website"]), "'"),
+                                preg_quote(strip_tags($user["username"]), "'"),
+                                $user["active"]
+                        );
+                }
+                $res =& $db->query($query);
+                if (PEAR::isError($res)) {
+                        die($res->getUserInfo());
+                }
+                header("Location: index.php?action=show_users");
+        } else {
+                header("Location: index.php?action=edit_user&id=".$user["id"]."&error=$error");
+        }
+}
+//}}}------------------------------------------------
+//{{{ delete_user($userid): remove user from database
+//---------------------------------------------------
+function delete_user($userid) {
+        $userid = sprintf("%d", $userid);
+        if ($userid > 0) {
+                /* check if user is in database */
+                $sql = sprintf("SELECT COUNT(*) FROM blog_users WHERE id = %d", $userid);
+                $res =& $GLOBALS["db"]->query($sql);
+                $res->fetchInto($row);
+                if ($row[0] > 0) {
+                        $sql = sprintf("DELETE FROM blog_users WHERE id = %d", $userid);
+                        $res = $GLOBALS["db"]->query($sql);
+                }
+        }
+        header("Location: index.php?action=show_users");
+}
 //}}}---------------------------------------
 //{{{ show_settings(); show the blogsettings
@@ -831 +1017 @@
                                                         <option value="75"<? if ($settings["postsperpage"] == 75) { echo " SELECTED"; } ?>>75</option>
                                                         <option value="100"<? if ($settings["postsperpage"] == 100) { echo " SELECTED"; } ?>>100</option>
+                                                </select>
+                                        </td>
+                                </tr><tr>
+                                        <td>enable anonymous comments</td>
+                                        <td>
+                                                <select name="settings[allowanoncomments]">
+                                                        <option value="0">no</option>
+                                                        <option value="1"<? if ($settings["allowanoncomments"] == 1) { echo " SELECTED"; } ?>>yes</option>
                                                 </select>
                                         </td>
@@ -1068 +1262 @@
 //-----------------------------------------------------------
 function delete_comment($id) {
-        $sql = sprintf("UPDATE comments set deleted = %d WHERE id = %d", mktime(), $id);
+        $sql = sprintf("DELETE FROM comments WHERE id = %d", $id);
         $res = $GLOBALS["db"]->query($sql);
         header("Location: index.php?action=show_comments");
@@ -1179 +1373 @@
                         <a class="if_menu_item<? if ($_REQUEST["action"] == "show_cats")      { echo "_act"; } ?>" href="./index.php?action=show_cats">categories</a>&nbsp;
                         <a class="if_menu_item<? if ($_REQUEST["action"] == "show_authors")   { echo "_act"; } ?>" href="./index.php?action=show_authors">authors</a>&nbsp;
+                        <a class="if_menu_item<? if ($_REQUEST["action"] == "show_users")   { echo "_act"; } ?>" href="./index.php?action=show_users">users</a>&nbsp;
                         <a class="if_menu_item<? if ($_REQUEST["action"] == "show_posts")     { echo "_act"; } ?>" href="./index.php?action=show_posts">posts</a>&nbsp;
                         <a class="if_menu_item<? if ($_REQUEST["action"] == "show_comments")  { echo "_act"; } ?>" href="./index.php?action=show_comments">comments</a>&nbsp;
@@ -1208 +1403 @@
                                 case "edit_author"    : edit_author($_REQUEST["id"]);         break;
                                 case "save_author"    : save_author($_POST["author"]);        break;
+                                case "show_users"     : show_users();                         break;
+                                case "edit_user"      : edit_user($_REQUEST["id"]);           break;
+                                case "save_user"      : save_user($_POST["user"]);            break;
+                                case "delete_user"    : delete_user($_REQUEST["user"]["id"]); break;
                                 case "show_settings"  : show_settings();                      break;
                                 case "save_settings"  : save_settings($_POST["settings"]);    break;