super secret admin page

From ed0594f8f73c6eee8c6eca6ecf6208952ea26cdc Mon Sep 17 00:00:00 2001 From: lonkaars Date: Sat, 13 May 2023 15:36:20 +0200 Subject: add products working (no image upload working yet) --- lib/login.php | 22 ++++++++++++++++----- public/admin-category.php | 6 ++++-- public/admin-product.php | 50 +++++++++++++++++++++++++++++++++++++++++++++-- public/admin.css | 24 +++++++++++++++++++++++ public/navbar.php | 22 +++++++++++++-------- public/product.php | 8 ++++++-- 6 files changed, 113 insertions(+), 19 deletions(-) create mode 100644 public/admin.css diff --git a/lib/login.php b/lib/login.php index 45d4c83..0683031 100644 --- a/lib/login.php +++ b/lib/login.php @@ -52,14 +52,26 @@ function get_cart_count() { $logged_in = check_login($username, $password); $cart_count = get_cart_count(); +// hansel and gretel crumbs +function leave_crumb() { + $prev = $_SERVER['HTTP_REFERER']; + $ONE_HOUR = time() + (60 * 60); + setcookie("prev", $prev, $ONE_HOUR, "/"); +} + function if_logged_in($is, $redirect, $back = false) { global $logged_in; if ($logged_in != $is) return; - if ($back) { - $prev = $_SERVER['HTTP_REFERER']; - $ONE_HOUR = time() + (60 * 60); - setcookie("prev", $prev, $ONE_HOUR, "/"); - } + if ($back) leave_crumb(); + http_response_code(302); + header("Location: ".$redirect); + die(); +} + +function if_privileged($level, $redirect, $back = false) { + global $user_privileges; + if (($user_privileges & $level) > 0) return; + if ($back) leave_crumb(); http_response_code(302); header("Location: ".$redirect); die(); diff --git a/public/admin-category.php b/public/admin-category.php index d65fc9e..a899b00 100644 --- a/public/admin-category.php +++ b/public/admin-category.php @@ -1,14 +1,16 @@ + - super secret admin page + categorie toevoegen

admin

categorie toevoegen

diff --git a/public/admin-product.php b/public/admin-product.php index d65fc9e..a760ebe 100644 --- a/public/admin-product.php +++ b/public/admin-product.php @@ -1,14 +1,60 @@ + +query("select max(id)+1 as id from webs.product"); +$obj = $res->fetch_object(); +$new_id = $obj->id; +?> +prepare("insert into webs.product (`name`, `description`, `price`, `category`, `image`) values (?, ?, ?, ?, ?)"); + $statement->bind_param("ssdii", $name, $description, $price, $category, $image); + $statement->execute(); +} while (false); +?> - super secret admin page + product toevoegen +

admin

product toevoegen

diff --git a/public/admin.css b/public/admin.css new file mode 100644 index 0000000..0892cf1 --- /dev/null +++ b/public/admin.css @@ -0,0 +1,24 @@ +form { + display: grid; + gap: 8px; +} + +@media (min-width: 600px) { + form { + grid-template-columns: auto 1fr; + } + + form label { + grid-column: 1; + } + + form input, + form textarea { + grid-column: 2; + } +} + +form textarea { + font-family: sans-serif; + resize: vertical; +} diff --git a/public/navbar.php b/public/navbar.php index 03f9ca3..4b4001d 100644 --- a/public/navbar.php +++ b/public/navbar.php @@ -6,14 +6,20 @@ winkel producten - login - - mand"; - if ($logged_in) echo " (".$cart_count.")"; - echo ""; - ?> - + login + EOF; + } while (false); ?> + + mand ($cart_count) + + EOF; + } while (false); ?> fetch_object();

id."-full.jpg"; - echo "

"; + echo <<<"EOF" + +

+ + EOF; ?>

name ?>

price ?> - description ?> +

description ?>