php - tilføj admin! - Udvikleren.dk - Programmering, webdesign og grafik

Tags: php

Bruger #7958 @ 30.09.06 20:24

Hej med jer. jeg har mit nyheds script, men der er kun plads til 1 admin! det er lidt noget l.rt når jeg skal have det sådan at 2 admins skulle kunne logge ind på det.

nogle der kan hjælpe? koderne står længere nede!

MY SQL DATABASE

Kode

CREATE TABLE comments (
  id int(11) NOT NULL auto_increment,
  name varchar(60) NOT NULL default '',
  email varchar(60) NOT NULL default '',
  date datetime NOT NULL default '0000-00-00 00:00:00',
  text text NOT NULL,
  parent int(11) NOT NULL default '0',
  PRIMARY KEY  (id)
) TYPE=MyISAM;

CREATE TABLE news (
  id int(11) NOT NULL auto_increment,
  title varchar(100) NOT NULL default '',
  author varchar(60) NOT NULL default '',
  date datetime NOT NULL default '0000-00-00 00:00:00',
  synopsis text NOT NULL,
  text text NOT NULL,
  image varchar(100) NOT NULL default '',
  PRIMARY KEY  (id)
) TYPE=MyISAM;

SELVE CONFIG!

Kode

<?php
$cfg['mysql']['host']     = 'HOST';
$cfg['mysql']['username'] = 'MYSQL BRUGERNAVN';
$cfg['mysql']['password'] = 'MYSQL PASSWORD';
$cfg['mysql']['database'] = 'DATABASE NAVN';

/* Indstillinger : administrationsmodul */
$cfg['admin']['username'] = 'ADMIN BRUGERNAVN';
$cfg['admin']['password'] = 'ADMIN PASSWORD';

$cfg['limit']             = 10; // ANTAL PR SIDE
$cfg['pages_each_way']    = 7; // PEGENDE SIDER
?>

6 svar postet i denne tråd vises herunder
1 indlæg har modtaget i alt 1 karma

Sorter efter stemmer Sorter efter dato

Bruger #10566 @ 30.09.06 22:11

Kode

<?php
session_start();
if (!isset($_SESSION['laccess']) && $_POST['referer'] != 'login') {
	header("Location: news.php?f=needlogin");
	exit;
}

include('../inc.config.php');

mysql_connect($cfg['mysql']['host'],$cfg['mysql']['username'],$cfg['mysql']['password']);
mysql_select_db($cfg['mysql']['database']);

if ($_POST['referer'] == 'login') {
	$kryptpassword = md5($_POST['password']);
	$kryptpassword2 = md5($_POST['password2']);
	if (($_POST['username'] == $cfg['admin']['username'] && $kryptpassword == $cfg['admin']['password']) || ($_POST['username'] == $cfg['admin']['username2'] && $kryptpassword2 == $cfg['admin']['password2'])) {
		$_SESSION['laccess'] = 1;
		header("Location: administration.php");
	} else {
		header("Location: news.php?f=wronglogin");
	}
}

if ($_POST['referer'] == 'post_news') {
	if ($_FILES['image']['name'] != '') {
		$image = time().substr($_FILES['image']['name'],strrpos($_FILES['image']['name'],'.'));
		move_uploaded_file($_FILES['image']['tmp_name'], '../files/'.$image);
	} elseif ($_POST['standard'] != '') {
		$image = $_POST['standard'];
	} else {
		$image = '';
	}
	mysql_query("INSERT INTO news VALUES ('','".$_POST['title']."','".$_POST['author']."',now(),'".$_POST['synopsis']."','".$_POST['text']."','".$image."')") or die(mysql_error());
	header("Location: news.list.php");
}
if ($_POST['referer'] == 'edit_news') {
	mysql_query("UPDATE news SET title='".$_POST['title']."', author='".$_POST['author']."', synopsis='".$_POST['synopsis']."', text='".$_POST['text']."', image='".$_POST['image']."' WHERE id=".$_POST['id']."") or die(mysql_error());
	header("Location: news.list.php?offset=".$_POST['offset']);
}

if ($_POST['referer'] == 'upload') {
	for ($i=0;$i<count($_FILES['file']['name']);$i++) {
		if ($_FILES['file']['name'][$i] != '') {
			move_uploaded_file($_FILES['file']['tmp_name'][$i], '../files/'.$_FILES['file']['name'][$i]);
		}
	}
	header("Location: files.list.php");
}
?>

Krypter passwordet så du kan sætte det ind i config.php filen i beskyttet form.

krypterpass.php

Kode

<form action="krypterpass.php" method="post">
<b>Password:</b><br />
<input type="password" name="password" /><br />
<b>Password2:</b><br />
<input type="password" name="password2" /><br />
<input type="submit" value="Krypter" />
</form>

<?PHP
$password = md5($_POST['password']);
$password2 = md5($_POST['password2']);

echo "
<b>Password 1:</b> $password<br />
<b>Password 2:</b> $password2";
?>

Indlæg senest redigeret d. 30.09.2006 22:28 af Bruger #10566

Bruger #10566 @ 30.09.06 21:21

Kan se du bruger hent password i fil metoden, så vil nok foreslår du nok skal gøre sådan her:

SELVE CONFIG!

Kode

<?php
$cfg['mysql']['host']     = 'HOST';
$cfg['mysql']['username'] = 'MYSQL BRUGERNAVN';
$cfg['mysql']['password'] = 'MYSQL PASSWORD';
$cfg['mysql']['database'] = 'DATABASE NAVN';

/* Indstillinger : administrationsmodul */
$cfg['admin']['username'] = 'ADMIN BRUGERNAVN';
$cfg['admin']['password'] = 'ADMIN PASSWORD';
$cfg['admin']['username2'] = 'ADMIN BRUGERNAVN2';
$cfg['admin']['password2'] = 'ADMIN PASSWORD2';

$cfg['limit']             = 10; // ANTAL PR SIDE
$cfg['pages_each_way']    = 7; // PEGENDE SIDER
?>

Så skal du i login filen fx lave:

Kode

if(($cfg['admin']['username'] == $_POST['brugernavn'] AND $cfg['admin']['password'] == $_POST['password']) OR ($cfg['admin']['username2'] == $_POST['brugernavn'] AND $cfg['admin']['password2'] == $_POST['password']))
{
echo "admin";
} else {
echo "blablabla";
}

Men husk nu at krypter passwordene.

Indlæg senest redigeret d. 30.09.2006 21:26 af Bruger #10566

Bruger #7958 @ 30.09.06 21:34

forstår ikke helt men dette er min handle som jeg kalder den

Kode

<?php
session_start();
if (!isset($_SESSION['laccess']) && $_POST['referer'] != 'login') {
	header("Location: news.php?f=needlogin");
	exit;
}

include('../inc.config.php');

mysql_connect($cfg['mysql']['host'],$cfg['mysql']['username'],$cfg['mysql']['password']);
mysql_select_db($cfg['mysql']['database']);

if ($_POST['referer'] == 'login') {
	if ($_POST['username'] == $cfg['admin']['username'] && $_POST['password'] == $cfg['admin']['password']) {
		$_SESSION['laccess'] = 1;
		header("Location: administration.php");
	} else {
		header("Location: news.php?f=wronglogin");
	}
}

if ($_POST['referer'] == 'post_news') {
	if ($_FILES['image']['name'] != '') {
		$image = time().substr($_FILES['image']['name'],strrpos($_FILES['image']['name'],'.'));
		move_uploaded_file($_FILES['image']['tmp_name'], '../files/'.$image);
	} elseif ($_POST['standard'] != '') {
		$image = $_POST['standard'];
	} else {
		$image = '';
	}
	mysql_query("INSERT INTO news VALUES ('','".$_POST['title']."','".$_POST['author']."',now(),'".$_POST['synopsis']."','".$_POST['text']."','".$image."')") or die(mysql_error());
	header("Location: news.list.php");
}
if ($_POST['referer'] == 'edit_news') {
	mysql_query("UPDATE news SET title='".$_POST['title']."', author='".$_POST['author']."', synopsis='".$_POST['synopsis']."', text='".$_POST['text']."', image='".$_POST['image']."' WHERE id=".$_POST['id']."") or die(mysql_error());
	header("Location: news.list.php?offset=".$_POST['offset']);
}

if ($_POST['referer'] == 'upload') {
	for ($i=0;$i<count($_FILES['file']['name']);$i++) {
		if ($_FILES['file']['name'][$i] != '') {
			move_uploaded_file($_FILES['file']['tmp_name'][$i], '../files/'.$_FILES['file']['name'][$i]);
		}
	}
	header("Location: files.list.php");
}
?>

Bruger #7958 @ 30.09.06 21:41

efter jeg lige så lidt på koden fandt jeg stedet

Kode

if ($_POST['referer'] == 'login') {
	if ($_POST['username'] == $cfg['admin']['username'] && $_POST['password'] == $cfg['admin']['password'])

og tilføjede så den så sådan her ud

Kode

if ($_POST['referer'] == 'login') {
	if ($_POST['username'] == $cfg['admin']['username'] && $_POST['password'] == $cfg['admin']['password']) or ($_POST['username'] == $cfg['admin']['username2'] && $_POST['password'] == $cfg['admin']['password2']) {

men det virker ikke

Bruger #10566 @ 30.09.06 21:50

Kode

<?php
session_start();
if (!isset($_SESSION['laccess']) && $_POST['referer'] != 'login') {
	header("Location: news.php?f=needlogin");
	exit;
}

include('../inc.config.php');

mysql_connect($cfg['mysql']['host'],$cfg['mysql']['username'],$cfg['mysql']['password']);
mysql_select_db($cfg['mysql']['database']);

if ($_POST['referer'] == 'login') {
	if (($_POST['username'] == $cfg['admin']['username'] && $_POST['password'] == $cfg['admin']['password']) || ($_POST['username'] == $cfg['admin']['username2'] && $_POST['password'] == $cfg['admin']['password2'])) {
		$_SESSION['laccess'] = 1;
		header("Location: administration.php");
	} else {
		header("Location: news.php?f=wronglogin");
	}
}

if ($_POST['referer'] == 'post_news') {
	if ($_FILES['image']['name'] != '') {
		$image = time().substr($_FILES['image']['name'],strrpos($_FILES['image']['name'],'.'));
		move_uploaded_file($_FILES['image']['tmp_name'], '../files/'.$image);
	} elseif ($_POST['standard'] != '') {
		$image = $_POST['standard'];
	} else {
		$image = '';
	}
	mysql_query("INSERT INTO news VALUES ('','".$_POST['title']."','".$_POST['author']."',now(),'".$_POST['synopsis']."','".$_POST['text']."','".$image."')") or die(mysql_error());
	header("Location: news.list.php");
}
if ($_POST['referer'] == 'edit_news') {
	mysql_query("UPDATE news SET title='".$_POST['title']."', author='".$_POST['author']."', synopsis='".$_POST['synopsis']."', text='".$_POST['text']."', image='".$_POST['image']."' WHERE id=".$_POST['id']."") or die(mysql_error());
	header("Location: news.list.php?offset=".$_POST['offset']);
}

if ($_POST['referer'] == 'upload') {
	for ($i=0;$i<count($_FILES['file']['name']);$i++) {
		if ($_FILES['file']['name'][$i] != '') {
			move_uploaded_file($_FILES['file']['tmp_name'][$i], '../files/'.$_FILES['file']['name'][$i]);
		}
	}
	header("Location: files.list.php");
}
?>

Bruger #10359 @ 09.10.06 12:27

Kan du ikke bare selv lave et nyheds system, med en admin database ? Så ville det være nemmer for dig selv.

Jeg har selv brugt netop dette nyheds system, men fandt hurtigt ud af at det var nemmer og lave selv, så kan du jo også selv bestemme hvad det skal indholde

tilføj admin!

Karma barometer (30 dage)

Modtaget

Givet

Favorit hos
Forum tråde
Artikler