aboutsummaryrefslogtreecommitdiff
path: root/admin.php
blob: 579d985661fbb8f8293a45219f097fe467a13327 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
<?php
session_start();
?>
<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="utf-8"/>
	<meta name="viewport" content="width=device-width initial-scale=1.0"/>
	<link href="style.css" rel="stylesheet" type="text/css"/>
	<title>Yota Callplan</title>
</head>
<body>
<header><a href="http://yota.yu1srs.org.rs/">YOTA</a></header>
<nav>
  <a href="/index.php">Activity Plan</a>
  <a href="/reservation.php">Make reservation</a>
  <span class="right">
<?php
  if (isset($_SESSION['admin']) && $_SESSION['admin'] == true) {
  	echo '<a class="active" href="admin.php">Administration</a>';
    echo '<a href="/logout.php">Logout</a>';
	} else {
    echo '<a class="active" href="/admin.php">Login</a>';
	}
?>
	</span>
</nav>
<main>
<?php
if (isset($_SESSION['admin']) && $_SESSION['admin'] == true) {
  try {
		$user = "yota_admin";
		$password = "quaequaquagh6ahwoh6Chahx1EiFooGh";
		$database = "yota_call_db";
		$conn = new PDO("mysql:host=localhost;dbname=$database", $user, $password);
		$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

		echo '<p id="notice">Reservation records: </p>';
    echo '<div class="tablediv">';
    echo "<table><thead>\n";
    echo "<tr>";
    echo "<th>ID</th>";
    echo "<th>Approved</th>";
    echo "<th>Operator Callsign</th>";
    echo "<th>QSO</th>";
    echo "<th>From</th>";
    echo "<th>To</th>";
    echo "<th>Frequencies</th>";
    echo "<th>Modes</th>";
    echo "<th>Special Callsign</th>";
    echo "<th>Operator Name</th>";
    echo "<th>Operator Email</th>";
    echo "<th>Operator Phone</th>";
    echo "<th>Actions</th>";
    echo "</tr></thead><tbody>\n";

    foreach($conn->query("SELECT * FROM activities ORDER BY `id` DESC") as $row) {
      echo "<tr>";
      echo "<td>" . $row['id'] . "</td>";

			if ($row['approved'])
				echo "<td class=\"center\"><input type=\"checkbox\" checked></td>";
			else
				echo "<td class=\"center\"><input type=\"checkbox\"></td>";

      echo "<td><div class=\"edit\" contenteditable=\"true\">" . $row['operatorCall'] . "</div></td>";
      echo "<td><div class=\"edit\" contenteditable=\"true\">" . $row['qso'] . "</div></td>";
      echo "<td><div class=\"edit\" contenteditable=\"true\">" . $row['fromTime'] . "</div></td>";
      echo "<td><div class=\"edit\" contenteditable=\"true\">" . $row['toTime'] . "</div></td>";
      echo "<td><div class=\"edit\" contenteditable=\"true\">" . $row['frequencies'] . "</div></td>";
      echo "<td><div class=\"edit\" contenteditable=\"true\">" . $row['modes'] . "</div></td>";
      echo "<td><div class=\"edit\" contenteditable=\"true\">" . $row['specialCall'] . "</div></td>";
      echo "<td><div class=\"edit\" contenteditable=\"true\">" . $row['operatorName'] . "</div></td>";
      echo "<td><div class=\"edit\" contenteditable=\"true\">" . $row['operatorEmail'] . "</div></td>";
      echo "<td><div class=\"edit\" contenteditable=\"true\">" . $row['operatorPhone'] . "</div></td>";

			echo "<td>";
			echo "<button onclick=\"btnAction('update', this)\">Update</button>";
			echo "<button onclick=\"btnAction('restore', this)\">Restore</button>";
			echo "<button onclick=\"btnAction('delete', this)\">Delete</button>";
			echo "</td></tr>\n";
    }
    echo "</tbody></table>\n</div>\n";
  } catch (PDOException $e) {
    echo "<p>Error!: " . $e->getMessage() . "</p>";
  }
} else {
	# Bad pass check...
	if (isset($_SESSION['admin']) && $_SESSION['admin'] == false)
		echo "<em>Bad credentials!</em>";
	# Login form
	echo '<form action="login.php" method="post">';
	echo '<label for="email">Email:</label>';
	echo '<input type="email" id="email" name="email">';
	echo '<label for="password">Password:</label>';
	echo '<input type="password" id="password" name="password">';
	echo '<input type="submit" value="Login">';
	echo '</form>';
}
?>
</main>
<script src="request-edit.js"></script>
</body>
</html>