paulo@33: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
paulo@33: <HTML>
paulo@33: <HEAD>
paulo@33: <META NAME="generator" CONTENT="http://txt2tags.sf.net">
paulo@33: <LINK REL="stylesheet" TYPE="text/css" HREF="index.css">
paulo@33: <TITLE>later links...</TITLE>
paulo@33: </HEAD>
paulo@33: <BODY>
paulo@33:
paulo@33: <DIV CLASS="header" ID="header">
paulo@33: <H1>later links...</H1>
paulo@33: </DIV>
paulo@33:
paulo@33: <DIV CLASS="body" ID="body">
paulo@33:
paulo@33: <?php
paulo@33:
paulo@33: include('../../login.php');
paulo@33: $database = 'pauloang_laterlinks';
paulo@33:
paulo@33: $link = mysql_connect('localhost', $username, $password);
paulo@33: if (!$link)
paulo@33: die('Could not connect to MySQL server: ' . mysql_error());
paulo@33:
paulo@33: $db_selected = mysql_select_db($database, $link);
paulo@33: if (!$db_selected)
paulo@33: die('Could not select database: ' . mysql_error());
paulo@33:
paulo@33: ?>
paulo@33:
paulo@33: <?php
paulo@33:
paulo@33: $_MY_PIN = 'qwop';
paulo@33: $pin = '';
paulo@33:
paulo@33: if (count($_POST) > 0) {
paulo@33: echo '<PRE>' . "\n";
paulo@33:
paulo@33: foreach ($_POST as $postKey => $postValue) {
paulo@33: if ($postKey != "pin")
paulo@33: echo $postKey . " => " . $postValue . "\n";
paulo@33: else if ($postKey == "pin") {
paulo@33: echo 'pin => ';
paulo@33: for ($i = 0, $n = strlen($postValue); $i < $n; $i++) echo 'x';
paulo@33: echo "\n";
paulo@33: $pin = $postValue;
paulo@33: }
paulo@33: }
paulo@33:
paulo@33: if ($pin == $_MY_PIN) {
paulo@33: echo "PIN OK \n";
paulo@33:
paulo@33: $query = NULL;
paulo@33:
paulo@33: if ($_POST["submit"] == "Delete") {
paulo@33: $delete_ids = array();
paulo@33: $delete_id_prefix = "delete_id_";
paulo@33: $delete_id_prefix_len = strlen($delete_id_prefix);
paulo@33: foreach ($_POST as $postKey => $postValue) {
paulo@33: if (strncmp($postKey, $delete_id_prefix, $delete_id_prefix_len) == 0)
paulo@33: array_push($delete_ids, intval($postValue));
paulo@33: }
paulo@33: if (count($delete_ids) > 0) {
paulo@33: $query = sprintf("DELETE FROM LaterLinks WHERE id in (%s)", join(',', $delete_ids));
paulo@33: echo $query;
paulo@33: }
paulo@33: } else if ($_POST["submit"] == "Add") {
paulo@33: $title = mysql_real_escape_string(trim($_POST["title"]));
paulo@33: $url = mysql_real_escape_string(trim($_POST["url"]));
paulo@33: if (strlen($title) && strlen($url)) {
paulo@33: $query = sprintf("INSERT INTO LaterLinks SET title='%s', url='%s'", $title, $url);
paulo@33: echo $query;
paulo@33: }
paulo@33: }
paulo@33:
paulo@33: if (!is_null($query))
paulo@33: mysql_query($query);
paulo@33: } else
paulo@33: echo "PIN FAIL \n";
paulo@33:
paulo@33: echo '</PRE>' . "\n";
paulo@33: }
paulo@33:
paulo@33: ?>
paulo@33:
paulo@33: <FORM ACTION="index.php" METHOD=post>
paulo@33:
paulo@33: <TABLE>
paulo@33: <TR>
paulo@33: <TH>Link</TH>
paulo@33: <TH>Created</TH>
paulo@33: <TH><INPUT TYPE=submit NAME="submit" VALUE="Delete"></TH>
paulo@33: </TR>
paulo@33:
paulo@33: <?php
paulo@33:
paulo@33: $query = 'SELECT * FROM LaterLinks';
paulo@33: $results = mysql_query($query);
paulo@33:
paulo@33: while ($row = mysql_fetch_assoc($results)) {
paulo@33: echo '<TR>';
paulo@33: echo ' <TD><A HREF="'.$row['url'].'">'.$row['title'].'</A></TD>';
paulo@33: echo ' <TD>'.$row['created_at'].'</TD>';
paulo@33: echo ' <TD><INPUT TYPE=checkbox NAME="delete_id_'.$row['id'].'" VALUE="'.$row['id'].'"></TD>';
paulo@33: echo '</TR>';
paulo@33: }
paulo@33:
paulo@33: mysql_free_result($results);
paulo@33: mysql_close($link);
paulo@33: ?>
paulo@33:
paulo@33: </TABLE>
paulo@33:
paulo@33: <P>
paulo@33: <LABEL>Title<INPUT TYPE=text NAME="title"></LABEL><BR>
paulo@33: <LABEL>URL<INPUT TYPE=text NAME="url"></LABEL><BR>
paulo@33: <INPUT TYPE=submit NAME="submit" VALUE="Add">
paulo@33: <P>
paulo@33:
paulo@33: <P>
paulo@33: <INPUT TYPE=password NAME="pin" VALUE="<?php echo $pin ?>">
paulo@33: </P>
paulo@33:
paulo@33: </FORM>
paulo@33:
paulo@33: </DIV>
paulo@33:
paulo@33: <!-- html code generated by txt2tags 2.4 (http://txt2tags.sf.net) -->
paulo@33: <!-- cmdline: txt2tags index.t2t -->
paulo@33: </BODY></HTML>