Skip to content
Snippets Groups Projects

Compare revisions

Changes are shown as if the source revision was being merged into the target revision. Learn more about comparing revisions.

Source

Select target project
No results found

Target

Select target project
  • isaack/VMS-SUEE_2.0
  • ztk.me/VMS-z
2 results
Show changes
Hide whitespace changes
Inline Side-by-side
Showing
with 1460 additions and 762 deletions
adminforce/content/usersystem/liste.php deleted 100644 → 0
View file @ 3e82a001
<?php
$gfx_status[0] = '<img src="images/gelb.gif" width="15" height="15" border="0" alt="Nicht freigeschaltet">';
$gfx_status[1] = '<img src="images/gruen.gif" width="15" height="15" border="0" alt="O.K.">';
$gfx_status[2] = '<img src="images/rot.gif" width="15" height="15" border="0" alt="Gesperrt">';
head("Userliste");
?>
<table class="table table-bordered">
<tr class="tabellenhead">
<th>#</th>
<th>UID</th>
<th>Kontostand</th>
<th>Nickname</th>
<th>Name</th>
<th>Emailadresse</th>
<th>Angemeldet</th>
</tr>
<?php
$userliste = db_query("SELECT k.uid,k.status,k.kontostand,u.nickname,u.vorname,u.nachname,u.angemeldet_seit,e.emailadresse
FROM " . $db_prefix . "_kontodaten AS k
LEFT JOIN " . $db_prefix . "_userdaten AS u ON u.uid=k.uid
LEFT JOIN " . $db_prefix . "_emaildaten AS e ON e.uid=k.uid
ORDER BY k.uid ASC");
$i = 0;
while ($ausgabe = mysqli_fetch_array($userliste)) {
$i++;
$row = ($i % 2 == 0) ? 0 : 1;
echo'
<tr class="tabellenbody_' . $row . '">
<td align="center"><a href="?content=/usersystem/userbearbeiten&amp;uid=' . $ausgabe['uid'] . '" target="_self">' . $gfx_status[$ausgabe['status']] . '</a></td>
<td align="center"><a href="../?content=/nickpage&amp;id=' . $ausgabe['uid'] . '" target="_blank">' . $ausgabe['uid'] . '</a></td>
<td align="center">' . number_format($ausgabe['kontostand'], 2, ",", ".") . '</td>
<td align="center">' . $ausgabe['nickname'] . '</td>
<td align="center">' . $ausgabe['vorname'] . ' ' . $ausgabe['nachname'] . '</td>
<td align="center"><a href="mailto:' . $ausgabe['emailadresse'] . '">Mail</a></td>
<td align="center">' . date("d.m.y - H:i", $ausgabe['angemeldet_seit']) . '</td>
</tr>
';
}
?>
</table>
<?php foot(); ?>
\ No newline at end of file
adminforce/content/usersystem/userbearbeiten.php deleted 100644 → 0
View file @ 3e82a001
<script type="text/javascript">
<!--
function ShowUserInfo (art) {
/* alle container ausblenden */
document.getElementById("Userinfo1").style.display = 'none';
document.getElementById("Userinfo2").style.display = 'none';
document.getElementById("Userinfo3").style.display = 'none';
document.getElementById("Userinfo4").style.display = 'none';
document.getElementById("Userinfo5").style.display = 'none';
document.getElementById("Userinfo6").style.display = 'none';
document.getElementById("Userinfo7").style.display = 'none';
/* ausgewaehlten container einblenden */
document.getElementById("Userinfo" + art).style.display = 'block';
}
-->
</script>
<?php
// Variable _GET['uid'] pruefen
if (!empty ($_GET['uid'])) $_POST['uid'] = $_GET['uid'];
$_POST['uid'] = (int)$_POST['uid'];
if (empty ($_POST['uid'])) die ('Keine korrekte User-ID &uuml;bergeben!');
// Allgemeine Daten speichern
if (isset ($_POST['profile'])) {
db_query ('UPDATE '.$db_prefix.'_userdaten SET chat_sperre = "'.$_POST['chat_sperre'].'", nickname = "'.$_POST['nickname'].'", vorname = "'.$_POST['vorname'].'", nachname = "'.$_POST['nachname'].'" WHERE uid = '.$_POST['uid']);
db_query ('UPDATE '.$db_prefix.'_emaildaten SET emailadresse = "'.$_POST['emailadresse'].'", freigabe_fuer = "'.$_POST['freigabe_fuer'].'" WHERE uid = '.$_POST['uid']);
db_query ("UPDATE ".$db_prefix."_kontodaten SET auszahlung_sperre = '". $_POST['auszahlung_sperre']. "', forced_sperre = '".$_POST['forced_sperre']."', bettel_sperre = '".$_POST['bettel_sperre']."' WHERE uid = '".$_POST['uid']."' ");
if ($_POST['werber'] != $_POST['alt_werber'] && $_POST['werber'] != $_POST['uid']) db_query ('UPDATE '.$db_prefix.'_werberdaten SET werber = "'.$_POST['werber'].'", umsatz = 0, zuordnungszeit = 0, reset = 0, resetzeit = 0, gesamt = 0, refback = 0, aktivzeit = 0 WHERE uid = '.$_POST['uid']);
}
// Betrag verbuchen
if (isset ($_POST['finanze'])) {
if ($_POST['buchungssumme'] > 0 && $_POST['buchungssumme']) {
$buchungs_id = create_code (14);
kontobuchung ($_POST['buchungsart'], $_POST['buchungssumme'], $buchungs_id, $_POST['uid'],1, 'Adminbuchung');
if ($_POST['art'] == '+'){
$ausgabe = $_POST['buchungsmenge'];
}else{
$einnahme = $_POST['buchungsmenge'];
}
bilanz($einnahme,$ausgabe);
$nachricht = 'Hallo,'."\n\n".'Es wurde soeben eine Buchung auf dein Userkonto ausgeführt:'."\n\n".$_POST['buchungsart'].' '.number_format($_POST['buchungssumme'], 2, ',', '.').' '.$waehrung.' '.$_POST['buchungstext']."\n\n\n".'Mit freundlichen Grüßen, dein '.$seitenname.'-Team';
if (isset ($_POST['send_mail']) && $_POST['send_mail'] == 'ja') usermail ($_POST['email'],$seitenname.' Kontobuchung', $nachricht, '"'.$seitenname.'" <'.$betreibermail.'>');
}
}
// Zugangsberechtigungen aendern
if (isset ($_POST['access'])) {
if (isset ($_POST['send_mail']) && $_POST['send_mail'] == 'ja') {
if ($_POST['status'] == 0) $desc = 'Wartend';
elseif ($_POST['status'] == 1) $desc = 'Freigeschaltet';
elseif ($_POST['status'] == 2) $desc = 'Gesperrt';
elseif ($_POST['status'] == 'loeschen') $desc = 'Gelöscht';
$grund = (empty ($_POST['hinweis'])) ? 'Keine Angabe' : $_POST['hinweis'];
$nachricht = 'Hallo,'."\n\n".'Dein Userstatus auf '.$seitenname.' wurde soebend geändert.'."\n\n".'Neuer Status: '.$desc.''."\n\n".'Grund:'."\n".$grund."\n\n\n".'Mit freundlichen Grüßen, dein '.$seitenname.'-Team';
usermail ($_POST['email'], 'Dein Account auf '.$seitenname, $nachricht, '"'.$seitenname.'" <'.$betreibermail.'>');
}
if ($_POST['status'] != 'loeschen') {
$_POST['status'] = (int)$_POST['status'];
db_query ('UPDATE '.$db_prefix.'_kontodaten SET status = '.$_POST['status'].', hinweis = "'.$_POST['hinweis'].'" WHERE uid = '.$_POST['uid']);
} else {
$sperrzeit = ( time() + ( 86400 * 365 ) );
db_query ('INSERT INTO '.$db_prefix.'_userblacklist (uid,zeit) VALUES ('.$_POST['uid'].','.$sperrzeit.')');
db_query ('DELETE FROM '.$db_prefix.'_kontodaten WHERE uid = '.$_POST['uid']);
db_query ('DELETE FROM '.$db_prefix.'_emaildaten WHERE uid = '.$_POST['uid']);
db_query ('DELETE FROM '.$db_prefix.'_userdaten WHERE uid = '.$_POST['uid']);
db_query ('DELETE FROM '.$db_prefix.'_werberdaten WHERE uid = '.$_POST['uid']);
db_query ('UPDATE '.$db_prefix.'_werberdaten SET werber = 0 WHERE werber = '.$_POST['uid']);
echo '<meta http-equiv="refresh" content="0; URL=index.php?content=/usersystem/liste">';
}
}
// Notizen speichern
if (isset ($_POST['notice'])) {
db_query ("INSERT INTO ".$db_prefix."_user_notizen (uid,admin_id,datum,text) VALUES (
'". mysqli_real_escape_string($sql_open,$_GET['uid']) ."',
'". mysqli_real_escape_string($sql_open,$_SESSION['admin']) ."',
'". time() ."',
'". mysqli_real_escape_string($sql_open,$_POST['text']) ."'
)");
}
// Daten einlesen
$sql = db_query ('SELECT * FROM '.$db_prefix.'_kontodaten t1, '.$db_prefix.'_userdaten t2, '.$db_prefix.'_emaildaten t3, '.$db_prefix.'_werberdaten t4 WHERE t1.uid = '.$_POST['uid'].' AND t2.uid = '.$_POST['uid'].' AND t3.uid = '.$_POST['uid'].' AND t4.uid = '.$_POST['uid'].' LIMIT 1');
if (mysqli_num_rows ($sql) == 0) die ('Die angegebene User-ID existiert nicht!');
$alledaten = mysqli_fetch_assoc ($sql);
?>
<?php head ('Bearbeiten des Users <i>'.$alledaten['nickname'].'</i> ('.$alledaten['uid'].')'); ?>
<div style="text-align: center;">
<a href="javascript:ShowUserInfo(1);">Allgemeines</a> &middot;
<a href="javascript:ShowUserInfo(2);">Statistik</a> &middot;
<a href="javascript:ShowUserInfo(3);">Konto</a> &middot;
<a href="javascript:ShowUserInfo(4);">Zugang</a> &middot;
<a href="javascript:ShowUserInfo(5);">Buchungen</a> &middot;
<a href="javascript:ShowUserInfo(6);">Notizen</a> &middot;
<a href="javascript:ShowUserInfo(7);">Bettel Refferer</a>
</div><hr size=1 style="color:#c0c0c0;">
<div id="Userinfo1" style="display: block;">
<form action="" method="POST">
<input type="hidden" name="uid" value="<?php echo $alledaten['uid'];?>">
<input type="hidden" name="alt_werber" value="<?php echo $alledaten['werber'];?>">
<table width="350" border="0" cellpadding="1" cellspacing="1" align="center" bgcolor="#000000">
<tr bgcolor="#fafafa">
<td align="right"><b>User-ID</b>:&nbsp;</td>
<td align="left">&nbsp;<?php echo $alledaten['uid'];?></td>
</tr>
<tr bgcolor="#ededed">
<td align="right"><b>Nickname</b>:&nbsp;</td>
<td align="left">&nbsp;<input type="text" name="nickname" value="<?php echo $alledaten['nickname'];?>"></td>
</tr>
<tr bgcolor="#fafafa">
<td align="right"><b>Werber-ID</b>:&nbsp;</td>
<td align="left">&nbsp;<input type="text" name="werber" value="<?php echo $alledaten['werber'];?>"></td>
</tr>
<tr bgcolor="#ededed">
<td align="right"><b>Vorname</b>:&nbsp;</td>
<td align="left">&nbsp;<input type="text" name="vorname" value="<?php echo $alledaten['vorname'];?>"></td>
</tr>
<tr bgcolor="#fafafa">
<td align="right"><b>Nachname</b>:&nbsp;</td>
<td align="left">&nbsp;<input type="text" name="nachname" value="<?php echo $alledaten['nachname'];?>"></td>
</tr>
<tr bgcolor="#ededed">
<td align="right"><b>eMailadresse</b>:&nbsp;</td>
<td align="left">&nbsp;<input type="text" name="emailadresse" value="<?php echo $alledaten['emailadresse'];?>"></td>
</tr>
<tr bgcolor="#fafafa">
<td align="right"><b>eMail-Empfang</b>:&nbsp;</td>
<td align="left">&nbsp;<select name="freigabe_fuer" size="1">
<option value="0" <?php if ($alledaten['freigabe_fuer'] == 0) echo'SELECTED';?>>Kein Empfang</option>
<option value="1" <?php if ($alledaten['freigabe_fuer'] == 1) echo'SELECTED';?>>Nur Newsletter</option>
<option value="2" <?php if ($alledaten['freigabe_fuer'] == 2) echo'SELECTED';?>>Nur Paidmails</option>
<option value="3" <?php if ($alledaten['freigabe_fuer'] == 3) echo'SELECTED';?>>Newsletter / Paidmails</option>
</select></td>
</tr>
<tr bgcolor="#ededed">
<td align="right">&nbsp;<b>Bettelsperre</b>:</td>
<td align="left">&nbsp;
<select name="bettel_sperre" size="1">
<option value="0" <?php if ($alledaten['bettel_sperre'] == 0) echo'SELECTED';?>>deaktiviert</option>
<option value="1" <?php if ($alledaten['bettel_sperre'] == 1) echo'SELECTED';?>>aktiviert</option>
</select>
</td>
</tr>
<tr bgcolor="#fafafa">
<td align="right">&nbsp;<b>Banner Sperre</b>:</td>
<td align="left">&nbsp;
<select name="forced_sperre" size="1">
<option value="0" <?php if ($alledaten['forced_sperre'] == 0) echo'SELECTED';?>>deaktiviert</option>
<option value="1" <?php if ($alledaten['forced_sperre'] == 1) echo'SELECTED';?>>aktiviert</option>
</select>
</td>
</tr>
<tr bgcolor="#ededed">
<td align="right">&nbsp;<b>Chat Sperre</b>:</td>
<td align="left">&nbsp;
<select name="chat_sperre" size="1">
<option value="0" <?php if ($alledaten['chat_sperre'] == 0) echo'SELECTED';?>>deaktiviert</option>
<option value="1" <?php if ($alledaten['chat_sperre'] == 1) echo'SELECTED';?>>aktiviert</option>
</select>
</td>
</tr>
<tr bgcolor="#fafafa">
<td><b>Auszahlungssperre</b></td>
<td>
<select name="auszahlung_sperre">
<option value="0" <?php if ($alledaten['auszahlung_sperre'] == 1) echo'SELECTED';?>>Gesperrt</option>
<option value="1" <?php if ($alledaten['auszahlung_sperre'] == 0) echo'SELECTED';?>>Freigeschaltet</option>
</select>
</td>
</tr>
<tr bgcolor="#ededed">
<td align="center" colspan="2"><br /><input type="submit" name="profile" value="&raquo; Updaten"><br />&nbsp;</td>
</tr>
</table>
</form>
</div>
<div id="Userinfo2" style="display: none;">
<table width="350" border="0" cellpadding="1" cellspacing="1" align="center" bgcolor="#000000">
<tr bgcolor="#fafafa">
<td>&nbsp;<b>Refback</b>:</td>
<td colspan="2" align="right"><?php echo $alledaten['refback'];?> %&nbsp;</td>
</tr>
<tr bgcolor="#ededed">
<td>&nbsp;<b>Angemeldet</b>:</td>
<td colspan="2" align="right"><?php echo date('d.m.Y H:i', $alledaten['angemeldet_seit']);?>&nbsp;</td>
</tr>
<tr bgcolor="#fafafa">
<td>&nbsp;<b>Letzter Login</b>:</td>
<td colspan="2" align="right"><?php echo date('d.m.Y H:i', $alledaten['loginzeit']);?>&nbsp;</td>
</tr>
<tr bgcolor="#ededed">
<td>&nbsp;<b>Letzte Aktivit&auml;t</b>:</td>
<td colspan="2" align="right"><?php echo date('d.m.Y H:i', $alledaten['last_active']);?>&nbsp;</td>
</tr>
<tr bgcolor="#fafafa">
<td>&nbsp;<b>Letzte IP</b>:</td>
<td colspan="2" align="right"><?php echo $alledaten['login_ip'];?>&nbsp;</td>
</tr>
<tr bgcolor="#ededed">
<td>&nbsp;<b>ForcedKlicks</b>:</td>
<td width=50 align="right"><?php echo $alledaten['klicks'];?>&nbsp;</td>
<td align="right"><?php echo number_format ($alledaten['kv'], 2, ',', '.').' '.$waehrung;?>&nbsp;</td>
</tr>
<tr bgcolor="#fafafa">
<td>&nbsp;<b>Betteln</b>:</td>
<td align="right"><?php echo $alledaten['angebettelt'];?>&nbsp;</td>
<td align="right"><?php echo number_format ($alledaten['bv'], 2, ',', '.').' '.$waehrung;?>&nbsp;</td>
</tr>
</table>
</div>
<div id="Userinfo3" style="display: none;">
<form action="" method="POST">
<input type="hidden" name="uid" value="<?php echo $alledaten['uid'];?>">
<input type="hidden" name="email" value="<?php echo $alledaten['emailadresse'];?>">
<table align="center" border="0" cellpadding="0" cellspacing="2">
<tr>
<td><b>Kontostand</b>:<br />
<?php echo number_format($alledaten['kontostand'],2,",",".").' '.$waehrung;?></td>
</tr>
<tr>
<td><br /><b>Summe</b>:<br />
<select style="width: 40px" name="buchungsart" size="1"><option value="+" SELECTED>+</option><option value="-">-</option></select><input style="width: 100px;" type="Text" name="buchungssumme" value=""></td>
</tr>
<tr>
<td><br /><b>Grund</b> (max. 30 Zeichen):<br />
<input style="width: 140px" type="text" name="buchungstext" value="" maxlength="30"></td>
</tr>
<tr>
<td><br /><b>Mail an User</b>:<br />
<input type="radio" name="send_mail" value="ja" /> Ja &nbsp; <input checked="checked" type="radio" name="send_mail" value="nein" /> Nein</td>
</tr>
<tr>
<td align="center"><br /><input type="submit" name="finanze" value="&raquo; Buchen" /></td>
</tr>
</table>
</form>
</div>
<div id="Userinfo4" style="display: none;">
<form action="" method="POST">
<input type="hidden" name="uid" value="<?php echo $alledaten['uid'];?>">
<input type="hidden" name="email" value="<?php echo $alledaten['emailadresse'];?>">
<table align="center" border="0" cellpadding="0" cellspacing="2">
<tr>
<td><b>Status</b>:<br />
<select name="status" size="1" style="width: 140px;">
<option value="0" <?php if ($alledaten['status'] == 0) echo'SELECTED';?>>Wartend</option>
<option value="1" <?php if ($alledaten['status'] == 1) echo'SELECTED';?>>Freigeschaltet</option>
<option value="2" <?php if ($alledaten['status'] == 2) echo'SELECTED';?>>Gesperrt</option>
<option value="<?php echo $alledaten['status'];?>">--------------</option>
<option value="loeschen">User l&ouml;schen</option>
</select></td>
</tr>
<tr>
<td><br /><b>Hinweistext</b>:<br />
<textarea name="hinweis" style="width: 140px; height: 100px;"><?php echo $alledaten['hinweis'];?></textarea></td>
</tr>
<tr>
<td><br /><b>Mail an User</b>:<br />
<input checked="checked" type="radio" name="send_mail" value="ja" /> Ja &nbsp; <input type="radio" name="send_mail" value="nein" /> Nein</td>
</tr>
<tr>
<td align="center"><br /><input type="submit" name="access" value="&raquo; &Auml;ndern" /></td>
</tr>
</table>
</form>
</div>
<div id="Userinfo5" style="display: none;">
<table class="tabellen" style="width:100%">
<tr class="tabellenhead">
<td align="center"><b>Buchungs Id</b></td>
<td align="center"><b>Datum</b></td>
<td align="center"><b>Zeit</b></td>
<td align="center"><b><?php echo $waehrung;?></b></td>
<td align="center"><b>Verwendungszweck</b></td>
</tr>
<?php
$buchungen_lesen = db_query('SELECT * FROM '.$db_prefix.'_buchungen WHERE uid = '.$alledaten['uid'].' ORDER BY buchungszeit DESC LIMIT 250');
while ($buchung_schreiben = mysqli_fetch_array($buchungen_lesen)) {
$i++;
$buchcolor = ($buchung_schreiben['buchungsmenge'] > 0) ? '#000000' : '#cc0000';
$linecolor = ($i %2 == 0) ? 1 : 0;
?>
<tr class="tabellenbody_<?php echo $linecolor;?>">
<td align="left">&nbsp;<?php echo $buchung_schreiben['buchungs_id'];?></td>
<td align="center">&nbsp;<?php echo date("d.m.Y",$buchung_schreiben['buchungszeit']);?>&nbsp;</td>
<td align="center">&nbsp;<?php echo date("H:i",$buchung_schreiben['buchungszeit']);?>&nbsp;</td>
<td align="right">&nbsp;<font color="<?php echo $buchcolor;?>"><?php echo number_format($buchung_schreiben['buchungsmenge'],2,",",".");?></font>&nbsp;</td>
<td align="left">&nbsp;<?php echo $buchung_schreiben['verwendungszweck'];?></td>
</tr>
<?php
}
?>
</table>
</div>
<div id="Userinfo6" style="display: none;">
<center>
<form action="" method="POST">
<table align="center" border="0" cellpadding="0" cellspacing="2">
<tr>
<td><b>Notizen</b>:<br />
<textarea name="text" cols="50" rows="20"></textarea></td>
</tr>
<tr>
<td align="center"><br /><input type="submit" name="notice" value="&raquo; Speichern" /></td>
</tr>
</table>
</form>
</center>
<hr>
<br>
<table width="100%">
<tr>
<td></td>
<td>Notiz</td>
</tr>
<?php
$da = db_query("SELECT * FROM ".$db_prefix."_user_notizen WHERE uid = '". mysqli_real_escape_string($sql_open,$_GET['uid']) ."' ");
while($daten = mysqli_fetch_array($da)){
echo '
<tr>
<td>'. date("d.m.Y", $daten['datum']) .'<br>Admin-ID: '.$daten['admin_id'] .'</td>
<td>'. nl2br($daten['text']) .'</td>
</tr>
';
}
?>
</table>
</div>
<div id="Userinfo7" style="display: none;">
<table class="tabellen" width="100%">
<tr class="tabellenhead">
<td>Zeit</td>
<td>Verg&uuml;tung</td>
<td>Refferer</td>
</tr>
<?php
$ref = db_query("SELECT zeit,betrag,refferer FROM ".$db_prefix."_bettel_buchung WHERE uid = '".$alledaten['uid']."' ");
while($refferer = mysqli_fetch_array($ref)){
echo '
<tr>
<td>'.date("d.m.Y - H:i", $refferer['zeit']).'</td>
<td>'.number_format($refferer['betrag'],2,",",".").'</td>
<td><a href="'.$refferer['refferer'].'" target="_new">'.$refferer['refferer'].'</a></td>
</tr>
';
}
?>
</table>
</div>
<?php foot(); ?>
\ No newline at end of file
adminforce/content/werbesystem/forcedbanner_468.php deleted 100644 → 0
View file @ 3e82a001
<?php
// Variabeln definieren
if (!isset($_POST['buchen'])) $_POST['buchen'] = "";
if (!isset($_POST['verdienst'])) $_POST['verdienst'] = "";
if (!isset($_POST['menge'])) $_POST['menge'] = "0";
if (!isset($_POST['ziel'])) $_POST['ziel'] = "";
if (!isset($_POST['banner_url'])) $_POST['banner_url'] = "";
if (!isset($_POST['reload'])) $_POST['reload'] = "1";
if (!isset($_POST['aufendhalt'])) $_POST['aufendhalt'] = "0";
if (!isset($buchungsfehler)) $buchungsfehler = "";
if (!isset($buchung)) $buchung = "";
if ($_POST['buchen'] == 'Jetzt Buchen') {
// Fehlerprüfung
if (!is_numeric($_POST['menge'])) $buchungsfehler .= 'Bei Menge nur Zahlen!<br>';
if (!$_POST['banner_url'] or !$_POST['menge'] or !$_POST['ziel'] or !$_POST['reload']) $buchungsfehler .= 'Bitte alle Felder ausfüllen!<br>';
if ($_POST['reload'] < 1 or $_POST['reload'] > 24 or !is_numeric($_POST['reload'])) $buchungsfehler .= 'Bei Reloadzeit nur Zahlen und zwischen 1 und 24 Stunden!<br>';
if ($_POST['aufendhalt'] < 0 or $_POST['aufendhalt'] > 30 or !is_numeric($_POST['aufendhalt'])) $buchungsfehler .= 'Bei dem Aufendhalt nur Zahlen und zwischen 0 und 30 Sekunden!<br>';
if ($_POST['aufendhalt'] > 30 or $_POST['aufendhalt'] < 0 or !is_numeric($_POST['aufendhalt'])) $buchungsfehler .= 'Aufendhalt nur Zahlen und zwischen 1 und 30 Sek.!<br>';
// Buchung durchführen
if (!$buchungsfehler) {
$buchungs_id = create_code(32);
$reload = $_POST['reload'] * 60 * 60;
db_query("INSERT INTO " . $db_prefix . "_gebuchte_werbung (tan,ziel,banner,aufendhalt,menge,preis,verdienst,werbeart,status,reload,sponsor) VALUES ('" . $buchungs_id . "','" . $_POST['ziel'] . "','" . $_POST['banner_url'] . "','" . $_POST['aufendhalt'] . "','" . $_POST['menge'] . "','0','" . $_POST['verdienst'] . "','forcedbanner','1','" . $reload . "','administrator')");
$buchung = 'true';
}
}
if ($buchungsfehler) {
head("Eingabefehler");
echo '<b><font color="#FF0000">' . $buchungsfehler . '</font></b>';
foot();
}
if ($buchung == 'true') {
head("Buchung erfolgreich...");
echo '<font color="#000080">Deine Buchung war erfolgreich und wurde dem System hinzugefügt.</font>';
foot();
}
head("Formular Forcedbanner 468*60");
echo '
<form action="" method="post">
<table width="100%" border="0" cellpadding="2" cellspacing="2">
<tr>
<td>Menge</td>
<td><input type="Text" name="menge" value="' . $_POST['menge'] . '" style="width:60px" maxlength="6"></td>
</tr>
<tr>
<td>Userverdienst</td>
<td><input type="Text" name="verdienst" value="' . $_POST['verdienst'] . '" style="width:60px" maxlength="6"></td>
</tr>
<tr>
<td>Ziel URL (mit http://)</td>
<td><input type="Text" name="ziel" value="' . $_POST['ziel'] . '" style="width:330px"></td>
</tr>
<tr>
<td>Banner URL (mit http://)</td>
<td><input type="Text" name="banner_url" value="' . $_POST['banner_url'] . '" style="width:330px"></td>
</tr>
<tr>
<td>Reloadzeit (Stunden)</td>
<td><input type="Text" name="reload" value="' . $_POST['reload'] . '" style="width:40px" maxlength="2"> max. 24 Stunden</td>
</tr>
<tr>
<td>Aufendhalt (Sekunden)</td>
<td><input type="Text" name="aufendhalt" value="' . $_POST['aufendhalt'] . '" style="width:40px" maxlength="2"> max. 30</td>
</tr>
<tr>
<td align="center" valign="middle" colspan="2"><input type="Submit" name="buchen" value="Jetzt Buchen"></td>
</tr>
</table>
</form>';
foot();
\ No newline at end of file
adminforce/content/werbesystem/paidmail.php deleted 100644 → 0
View file @ 3e82a001
<?php
if (!isset($_POST['versenden'])) $_POST['versenden'] = "";
if (!isset($_POST['verdienst'])) $_POST['verdienst'] = "";
if (!isset($_POST['menge'])) $_POST['menge'] = "0";
if (!isset($_POST['ziel'])) $_POST['ziel'] = "";
if (!isset($_POST['mailtext'])) $_POST['mailtext'] = "";
if (!isset($_POST['beschreibung'])) $_POST['beschreibung'] = "";
if (!isset($_POST['aufendhalt'])) $_POST['aufendhalt'] = "0";
if (!isset($_POST['gueltig'])) $_POST['gueltig'] = "1";
if (!isset($tan)) $tan = "";
$empfaenger = db_query("SELECT e.uid,e.emailadresse FROM
" . $db_prefix . "_emaildaten e
LEFT JOIN " . $db_prefix . "_kontodaten k ON k.uid=e.uid
WHERE (e.freigabe_fuer = '3' or e.freigabe_fuer = '2') AND k.status=1");
$maxempf = mysqli_num_rows($empfaenger);
if ($_POST['versenden'] == 'Paidmail versenden!') {
if ($_POST['menge'] == 0) $_POST['menge'] = 5000;
if ($_POST['menge'] >= $maxempf) $_POST['menge'] = $maxempf;
$tan = create_code(14);
$bis = time() + (86400 * $_POST['gueltig']);
db_query("INSERT INTO " . $db_prefix . "_paidmails_versendet (tan,menge,verdienst,ziel,beschreibung,mailtext,aufendhalt,gesendet,gueltig) VALUES ('" . $tan . "','" . $_POST['menge'] . "','" . $_POST['verdienst'] . "','" . $_POST['ziel'] . "','" . $_POST['beschreibung'] . "','" . $_POST['mailtext'] . "','" . $_POST['aufendhalt'] . "','" . time() . "','" . $bis . "')");
$senden = db_query("SELECT e.uid,e.emailadresse FROM
" . $db_prefix . "_emaildaten e
LEFT JOIN " . $db_prefix . "_kontodaten k ON k.uid=e.uid
WHERE (e.freigabe_fuer = '3' or e.freigabe_fuer = '2') AND k.status=1 ORDER BY RAND() LIMIT " . $_POST['menge'] . "");
while ($versendet = mysqli_fetch_array($senden)) {
db_query("INSERT INTO " . $db_prefix . "_paidmails_empfaenger (uid,gueltig,tan,status,aufendhalt) VALUES ('" . $versendet['uid'] . "','" . $bis . "','" . $tan . "','0','" . $_POST['aufendhalt'] . "')");
$message = 'Hallo,
dieses ist eine neue ' . $seitenname . ' Paidmail, für dessen Bestätigung
Du ' . $_POST['verdienst'] . ' ' . $waehrung . ' für ' . $_POST['aufendhalt'] . ' Sek. aufenthalt erhälst!
Diese Paidmail ist gültig bis ' . date("d.m.Y - H:i:s", $bis) . '
' . $_POST['beschreibung'] . '
' . $_POST['mailtext'] . '
--------------------------------------------------------------------
Die Betreiber von ' . $seitenname . ' distanzieren sich vom Inhalt dieser Mail!
Diese Mail ist kein Spam da der Empfänger als Mitglied von
' . $seitenname . ' dem Empfang zugestimmt hat.
Bestätigungslink:
' . $domain . '/pclick.php?tan=' . $tan . '&uid=' . $versendet["uid"] . '
Mit freundlichen Grüßen
Das ' . $seitenname . ' Team';
usermail($versendet['emailadresse'], 'Neue ' . $seitenname . ' Paidmail', $message, '"' . $seitenname . '" <' . $betreibermail . '>') or die('Versandfehler');
}
$msg_send = '<b><div align="center"><font color="#800000">Diese Paidmail wurd an ' . $_POST['menge'] . ' User versendet</font></div></b>';
}
head("Paidmail einbuchen und versenden");
echo '
<form action="" method="post">
<table width="100%" border="0" cellpadding="2" cellspacing="2">
<tr>
<td>Anzahl der Empfänger</td>
<td><input type="Text" name="menge" value="' . $_POST['menge'] . '" style="width:60px" maxlength="6"> (0 = an alle, max: ' . $maxempf . ')</td>
</tr>
<tr>
<td>Userverdienst</td>
<td><input type="Text" name="verdienst" value="' . $_POST['verdienst'] . '" style="width:60px" maxlength="6"></td>
</tr>
<tr>
<td>Ziel URL (mit http://)</td>
<td><input type="Text" name="ziel" value="' . $_POST['ziel'] . '" style="width:330px"></td>
</tr>
<tr>
<td>Beschreibung</td>
<td><input type="Text" name="beschreibung" value="' . $_POST['beschreibung'] . '" style="width:215px" maxlength="30"> (max. 30 Zeichen)</td>
</tr>
<tr>
<td valign="top">Mailtext</td>
<td><textarea cols="50" rows="10" name="mailtext">' . $_POST['mailtext'] . '</textarea></td>
</tr>
<tr>
<td>Aufendhalt (Sekunden)</td>
<td><input type="Text" name="aufendhalt" value="' . $_POST['aufendhalt'] . '" style="width:40px" maxlength="2"></td>
</tr>
<tr>
<td>Gültig (TAGE)</td>
<td><input type="Text" name="gueltig" value="' . $_POST['gueltig'] . '" style="width:40px" maxlength="2"></td>
</tr>
<tr>
<td align="center" valign="middle" colspan="2"><input type="Submit" name="versenden" value="Paidmail versenden!"></td>
</tr>
</table>
</form>
' . $msg_send;
foot();
\ No newline at end of file
adminforce/content/werbesystem/paidmail_hist.php deleted 100644 → 0
View file @ 3e82a001
<?php
if (!isset($_GET['tan'])) $_GET['tan'] = "";
if (!isset($_GET['loeschen'])) $_GET['loeschen'] = "";
if ($_GET['loeschen'] == 'true') {
db_query("DELETE FROM " . $db_prefix . "_paidmails_versendet WHERE tan='" . $_GET['tan'] . "'");
db_query("DELETE FROM " . $db_prefix . "_paidmails_empfaenger WHERE tan='" . $_GET['tan'] . "'");
}
$mails = db_query("SELECT * FROM " . $db_prefix . "_paidmails_versendet ORDER BY gesendet DESC");
while ($history = mysqli_fetch_array($mails)) {
head('Paidmail: ' . $history['beschreibung']);
echo '<b>Tan:</b> ' . $history['tan'] . '<br>
<b>Menge:</b> ' . $history['menge'] . '<br>
<b>Bestätigt:</b> ' . $history['bestaedigt'] . ' (' . @round($history['bestaedigt'] / $history['menge'] * 100, 2) . ' %)<br>
<b>Userverdienst:</b> ' . $history['verdienst'] . '<br>
<b>Gültig bis:</b> ' . date("d.m.Y - H:i", $history['gueltig']) . '<br>
<b>Gesendet am:</b> ' . date("d.m.Y - H:i", $history['gesendet']) . ' <br>
<b>Aufenthalt:</b> ' . $history['aufendhalt'] . ' Sek.<br>
<p align="center"><textarea style="width:100%">' . $history['mailtext'] . '</textarea></p>';
if ($history['gueltig'] <= time() or $history['menge'] == $history['bestaedigt']) {
echo '
<br><br><a href="?content=/werbesystem/paidmail_hist&amp;tan=' . $history['tan'] . '&amp;loeschen=true"><b>Löschen!</b></a>
';
}
foot();
}
if (!mysqli_num_rows($mails)) {
head("Information");
echo 'Noch keine Paidmails vorhanden!';
foot();
}
\ No newline at end of file
adminforce/index.php
View file @ bfeadae2
<?php
if (strpos ($_GET['content'], '/logout/') !== false) {
error_reporting(E_ALL);
ini_set('display_errors', 'On');
if (isset($_GET['logout']) && $_GET['logout'] == true) {
session_start();
unset($_SESSION['admin']);
header("Location: ".$_SERVER['PHP_SELF']);
......@@ -8,159 +10,34 @@
if (strpos ($_GET['content'], '../') !== false) die ('Zugriffsverletzung !');
if ($_GET['content'] {0} != '/') $_GET['content'] = '/' . $_GET['content'];
}
if (!ini_get('display_errors')) {
ini_set('display_errors', '0');
}
if (!isset($_GET['content']) || empty ($_GET['content'])) $_GET['content'] = '/intern/startseite';
if (!isset($_GET['content']) || empty ($_GET['content'])) $_GET['content'] = '/startseite';
if (!file_exists('content' . $_GET['content'] . '.php')) $_GET['content'] = '/error/keine_seite';
require ('../lib/datenbank.inc.php');
require ('../lib/functions.lib.php');
require_once('lib/lang/lang.de.php');
require_once(__dir__ .'/../lib/db_config.php');
require_once(__dir__ .'/../lib/class/db.class.php');
require_once(__dir__ .'/../lib/var.php');
require_once(__dir__ .'/../lib/functions.lib.php');
session_start();
require ('lib/layout.lib.php');
require ( '../lib/extras.lib.php' );
require ('../lib/extra/mail.php');
require ('lib/run.inc.php');
$grundconfig = $datenbank->get_row("SELECT * FROM ". PREFIX . CONFIG ." ",true);
require_once('lib/layout.lib.php');
require_once( '../lib/extras.lib.php' );
require_once('lib/run.inc.php');
$grundconfig = $datenbank->get_row("SELECT * FROM ". PREFIX . CONFIG ." ",true);
$shows = 0;
if (!isset($_GET['content'])) $_GET['content'] = '/startseite';
if (!file_exists('content'.$_GET['content'].'.php')) $_GET['content'] = '/error/keine_seite';
if($_POST['check'] == "Login") {
require_once ('../lib/functions.lib.php');
$page = mysqli_fetch_array(db_query("SELECT admin_name, admin_pass FROM ".$db_prefix."_seitenkonfig LIMIT 1"));
if($_POST['loginname'] == $page['admin_name'] AND md5($_POST['passwort']) == $page['admin_pass']) {
$_SESSION['admin'] = 1;
header("Location: ".$_SERVER['PHP_SELF']."?".$_SERVER['QUERY_STRING']);
}else{
?>
<script>
alert("Fehler beim Einloggen");
</script>
<?php
if (!isset($_GET['page'])) $_GET['page'] = '/startseite';
if (!file_exists('page'.$_GET['page'].'.php')) $_GET['page'] = '/error/keine_seite';
if(!isset($_SESSION['admin'])){
die("Bitte erst im Userbereich anmelden<br><a href='". $grundconfig->domain ."' '>Zur&uuml;ck</a>");
}else{
if($_SESSION['admin'] == 1){
require_once(__dir__ .'/lib/login.php');
}else{
require_once(__dir__ .'/lib/logout.php');
}
}
}
?>
<!DOCTYPE html>
<html lang='de'>
<head>
<title>..:: Adminforce ::..</title>
<meta charset="UTF-8">
<meta name="generator" content="vms-script">
<meta name="Author" content="Designerscripte.net">
<meta name="Publisher" content="Designerscripte.net">
<meta name="Keywords" content="vms,paid4,loginscript">
<meta name="Description" content="Verdien was Du willst">
<meta name="Robots" content="INDEX,FOLLOW">
<link href="../css/bootstrap.min.css" rel="stylesheet">
<link href="../js/multibox.css" rel="stylesheet" type="text/css" />
<script src="//cdn.ckeditor.com/4.4.7/full/ckeditor.js"></script>
<script type="text/javascript" src="../js/mootools.js"></script>
<script type="text/javascript" src="../js/overlay.js"></script>
<script type="text/javascript" src="../js/multibox.js"></script>
<script type="text/javascript" src="../js/kredit.js"></script>
<script type="text/javascript" src="../js/tcal.js"></script>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js"></script>
<script src="../js/bootstrap.min.js"></script>
</head>
<body>
<noscript><div style="font: 10pt Arial; color: #ff0000; text-align: center;">Um <b>alle Funktionen des Adminforce</b> nutzen zu k&ouml;nnen, bitte <b>JavaScript aktivieren</b>!</div></noscript>
<nav class="navbar navbar-inverse navbar-fixed-top">
<div class="container">
<div class="navbar-header">
<button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#navbar" aria-expanded="false" aria-controls="navbar">
<span class="sr-only">Navigation ein-/ausblenden</span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a class="navbar-brand" href="#">Adminforce</a>
</div>
<div id="navbar" class="navbar-collapse collapse">
<ul class="nav navbar-nav">
<?php if(!isset($_SESSION['admin']) && $_SESSION['admin'] != 1){?>
<li class="dropdown">
<a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true" aria-expanded="false">Login <span class="caret"></span></a>
<ul class="dropdown-menu">
<li>
<form method="post">
<input type="Text" name="loginname" value="<?php echo $_POST['loginname'];?>" placeholder="Username">
<input type="Password" name="passwort" value="" placeholder="Passwort">
<button type="submit" name="check" value="Login">Login</button>
</form>
</li>
<?php }else{ ?>
<li><a href="?content=/startseite">Startseite</a></li>
<li><a href="?content=/bilanzsystem">Bilanz</a></li>
<li><a href="?content=/usersystem/liste">Userliste</a></li>
<li><a href="?content=/logout/">Logout</a></li>
</ul>
</li>
<?php } ?>
</ul>
</div><!--/.nav-collapse -->
</div>
</nav>
<br><br><br><br>
<div class="container theme-showcase" role="main">
<div class="row">
<div class="col-md-3">
<?php if($_SESSION['admin'] == 1) require_once('lib/menue_links.php');?>
</div>
<div class="col-md-9">
<div class="jumbotron">
<?php
if(!empty($meldung)){
?>
<script>
$(window).load(function(){
$('#meldung_modal').modal('show');
});
</script>
<div class="modal fade" id="meldung_modal">
<div class="modal-dialog">
<div class="modal-content">
<div class="modal-body">
<?php
if($error == '1'){
echo '
<div class="alert alert-danger" role="alert">
';
}else{
echo '
<div class="alert alert-success" role="alert">
';
}
echo $meldung;
?>
</div>
</div>
<div class="modal-footer">
<button type="button" class="btn btn-default" data-dismiss="modal">Schließen</button>
</div>
</div>
</div>
</div>
<?php
}
if($_SESSION['admin'] == 1) {
if(file_exists('../install')){
echo '<div id="meldungrot">Du musst den Ordner install noch l&ouml;schen</div>';
}
require_once('content'.$_GET['content'].'.php');
}?>
</div>
</div>
</div>
</div>
</body>
</html>
<? db_close (); ?>
adminforce/lib/.htaccess 0 → 100644
View file @ bfeadae2
deny from all
adminforce/lib/MenueAuswahl.php 0 → 100644
View file @ bfeadae2
<?php
require_once('../../lib/db_config.php');
require_once('../../lib/datenbank.inc.php');
require_once('../../lib/functions.lib.php');
$aus = '';
$datenbank = new DB;
$id = 0;
if(is_numeric($_POST['id'])){ $id = $_POST['id'];}
if($_POST['art'] == 'user'){ $art = M_US;}
if($_POST['art'] == 'admin'){ $art = M_AD;}
foreach($datenbank->get_results("SELECT name,id FROM ". PREFIX . $art ." WHERE box = '$id' ") AS $res){
$aus .= '<option value="'. $res->id .'">'. $res->name.' </option>';
}
echo '
<td>Men&uuml;punkt w&auml;hlen<br><i><small>optional</small></i></td>
<td>
<select name="uid" class="form-control">
<option value="0">bitte w&auml;hlen</option>
'. $aus .'
</select>
</td>
';
adminforce/lib/class/addblacklist.class.php 0 → 100644
View file @ bfeadae2
<?php
class addblacklist{
private $db;
function __construct(){
global $datenbank;
$this->db = $datenbank;
}
public function Liste(){
$aus = '';
$array = array();
$query = "SELECT *,COUNT(tan) AS ges FROM ". PREFIX . BLACKLIST ." GROUP BY tan ORDER BY COUNT(tan) ASC";
if($this->db->num_rows($query) > 0){
foreach($this->db->get_results($query) AS $res){
$row = $this->db->get_row("SELECT * FROM ". PREFIX . WERBUNG ." WHERE tan = '$res->tan' ",true);
if($row->status == 1){ $status = '<div class="alert alert-success">Freigeschaltet</div>';}
if($row->status == 2){ $status = '<div class="alert alert-danger">Gesperrt</div>';}
$aus .= '
<form method="post" action="">
<input type="hidden" name="tan" value="'. $res->tan .'">
<div class="card">
<div class="card-body text-center">
<div class="row">
<div class="col">
<div class="col text-left">
Status: '. $status .'<br>
TAN: '. $res->tan .'<br>
Meldungen: '. $res->ges .'
</div>
</div>
<div class="col text-left">
<img src="'. $row->banner .'"><br>
';
if(!empty($row->betreff)){
$aus .= '
<u>Betreff:</u> '. $row->betreff .'<br>
<u>Text:</u> '. $row->text .'
';
}
$aus .= '
</div>
</div>
<hr>
<div class="row">
<div class="col">Sponsor: '. $row->sponsor .'</div>
<div class="col">Verdienst: '. number_format($row->verdienst,2,',','.') .'</div>
<div class="col">Reload: '. $row->reload .' min</div>
<div class="col">Menge: '. $row->menge .'</div>
</div>
<hr>
<div class="row">
<div class="col"><input type="submit" name="run[BannerDelete]" value="Banner Sperren" class="btn btn-danger btn-block"></div>
<div class="col"><button type="button" class="btn btn-primary btn-block" data-toggle="modal" data-target="#meldung'.$res->tan .'">Meldungen Anzeigen</button></div>
<div class="col"><input type="submit" name="run[BannerFree]" value="Banner freigeben" class="btn btn-success btn-block"></div>
</div>
</div>
</div>
</form>
<div class="modal fade" id="meldung'.$res->tan .'" tabindex="-1" role="dialog" aria-labelledby="exampleModalLabel" aria-hidden="true">
<div class="modal-dialog" role="document">
<div class="modal-content">
<div class="modal-header">
<h5 class="modal-title" id="exampleModalLabel">Gemeldet von</h5>
<button type="button" class="close" data-dismiss="modal" aria-label="Close">
<span aria-hidden="true">&times;</span>
</button>
</div>
<div class="modal-body">
'. $this->BannerMeldungen($res->tan) .'
</div>
<div class="modal-footer">
<button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
</div>
</div>
</div>
</div>
<br>
';
}
}else{
$aus = '<div class="alert alert-info">Es sind momentan keine Meldungen vorhanden</div>';
}
return $aus;
}
private function BannerMeldungen($tan){
$aus = '<table class="table table-striped">';
foreach($this->db->get_results("SELECT uid,datum FROM ". PREFIX . BLACKLIST ." WHERE tan = '$tan' ") AS $res){
$userinfo = userinfo($res->uid);
$aus .= '
<tr>
<td>User</td>
<td>'. $userinfo->nickname .'</td>
<td>Meldung am</td>
<td>'. date("d.m.Y H:i",$res->datum) .'</td>
</tr>
';
}
$aus .= '</table>';
return $aus;
}
public function Delete($post){
if($this->db->update(PREFIX . WERBUNG, array("status" => 2), array("tan" => $this->db->escape($post['tan'])),1) == true){
meldung(0,BANNER_DELETE_TRUE);
}else{
meldung(1,BANNER_DELETE_FALSE);
}
}
public function Free($post){
if($this->db->update(PREFIX . WERBUNG, array("status" => 1), array("tan" => $this->db->escape($post['tan'])),1) == true){
meldung(0,BANNER_FREE_TRUE);
}else{
meldung(1,BANNER_FREE_FALSE);
}
}
}
adminforce/lib/class/betreiber.class.php 0 → 100644
View file @ bfeadae2
<?php
class betreiber{
private $db;
private $error = 0;
private $meldung;
private $post = array();
public function __construct(){
global $datenbank;
$this->db = $datenbank;
}
function post(){
global $_POST;
if($_POST['updaten_betreiberdaten'] == 'Updaten'){ $this->updaten(); }
if($_POST['updaten_betreiberdaten'] == 'Hinzufügen !'){ $this->hinzufuegen();}
if($_POST['updaten_betreiberdaten'] == 'Loeschen !'){ $this->loeschen();}
}
public function post_pruef(){
global $_POST;
if(empty($this->post['name'])){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_NAME_FALSE;}
if(empty($this->post['betreiber_id']) OR !is_numeric($this->post['betreiber_id'])){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_BID_FALSE;}
if(empty($this->post['betreiber_passwort'])){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_BPW_FALSE;}
if(empty($this->post['schnittstelle'])){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_DATEI;}
if(empty($this->post['einzahltext'])){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_EINZAHLTEXT;}
if(empty($this->post['auszahltext'])){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_AUSZAHLTEXT;}
if($this->post['anfragen_tag'] != 0 AND (empty($this->post['anfragen_tag']) OR !is_numeric($this->post['anfragen_tag'])) ){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_ANFRAGEN_TAG;}
if($this->post['anfragen_user'] != 0 AND (empty($this->post['anfragen_user']) OR !is_numeric($this->post['anfragen_user'])) ){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_ANFRAGEN_USER;}
if(empty($this->post['waehrung_name'])){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_WNAME;}
if(empty($this->post['punktewert']) OR !is_numeric($this->post['punktewert'])){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_PUNKTEWERT;}
if(empty($this->post['wertepunkt']) OR !is_numeric($this->post['wertepunkt'])){ $this->error = 1; $this->meldung .= POST_PRUEF_BETREIBERDATEN_WERTPUNKTE;}
if(isset($this->post['aktiv'])){
if($this->post['aktiv'] == 'on'){ $this->post['aktiv'] = 1;}else{ $this->post['aktiv'] = 0;}
}
if(isset($this->post['aktiv_ein'])){
if($this->post['aktiv_ein'] == 'on'){$this->post['aktiv_ein'] = 1;}else{ $this->post['aktiv_ein'] = 0;}
}
if(isset($this->post['aktiv_aus'])){
if($this->post['aktiv_aus'] == 'on'){ $this->post['aktiv_aus'] = 1;}else{ $this->post['aktiv_aus'] = 0;}
}
}
public function post_array($daten){
foreach($daten as $key => $value) {
if($key != '' AND $key != 'run' && $value != ''){
$this->post[$this->db->escape($key)] = $this->db->escape($value);
}
}
}
public function hinzufuegen(){
global $_POST;
$this->post_array($_POST);
$this->post_pruef();
if($this->error == 0){
$insert = $this->db->insert(PREFIX . SCHNITT , $this->post);
if($insert == true){
$this->meldung = BETREIBERDATEN_SAVE_TRUE;
}else{
$this->error = 1;
$this->meldung = BETREIBERDATEN_SAVE_FALSE;
}
}
meldung($this->error,$this->meldung);
}
public function updaten(){
global $_POST;
$this->post_array($_POST);
$this->post_pruef();
$update = $this->db->update(PREFIX . SCHNITT , $this->post , array("schnittstelle" => $this->db->escape($_POST['schnittstelle']) ) , 1);
if($update == true){
$this->meldung = BETREIBERDATEN_SAVE_TRUE;
}else{
$this->error = 1;
$this->meldung = BETREIBERDATEN_SAVE_FALSE;
}
meldung($this->error,$this->meldung);
}
public function loeschen(){
global $_POST;
$array = $this->post_pruef();
if($this->db->delete(PREFIX . SCHNITT, array("schnittstelle" => $array['schnittstelle']),1) == true){
$this->meldung = 'Erfolgreich gel&ouml;scht';
}else{
$this->error = 1;
$this->meldung = 'Fehler beim l&ouml;schen';
}
meldung($this->error,$this->meldung);
}
function schnitt_zeigen($id){
$daten = $this->db->get_row("SELECT * FROM " . PREFIX . SCHNITT . " WHERE schnittstelle = '". $this->db->escape($id) ."' ",true);
$aktiv = array("aktiv" => '', "aktiv_ein" => '', "aktiv_aus" => '');
if($daten->aktiv == 1){ $aktiv['aktiv'] = 'checked';}
if($daten->aktiv_ein == 1){ $aktiv['aktiv_ein'] = 'checked';}
if($daten->aktiv_aus == 1){ $aktiv['aktiv_aus'] = 'checked';}
$aus = '
<div role="tabpanel" class="tab-pane" id="'. $id .'">
<form action="" method="post">
<input class="form-control" type="hidden" name="schnittstelle" value="'. $id .'">
<div class="row">
<div class="col-md-6">Name der Schnitstelle</div>
<div class="col-md-6"><input type="text" class="form-control" name="name" value="'. $daten->name .'"></div>
<br><hr>
<div class="col-md-6">Betreiber-ID</div>
<div class="col-md-6"><input class="form-control" type="Text" name="betreiber_id" value="'. $daten->betreiber_id .'"></div>
<br><hr>
<div class="col-md-6">Betreiberpasswort</div>
<div class="col-md-6"><input class="form-control" type="Text" name="betreiber_passwort" value="'. $daten->betreiber_passwort .'"></div>
<br><hr>
<div class="col-md-6">Betreiberkennung<br><i>Sofern notwendig</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="betreiber_kennung" value="'. $daten->betreiber_kennung .'"></div>
<br><hr>
<div class="col-md-6">Schnittstelle<br><i>Dateiname der Schnittstelle</i></div>
<div class="col-md-6">
<div class="form-group">
<div class="input-group">
<input type="text" class="form-control" name="schnittstelle" value="'. $daten->schnittstelle .'">
<div class="input-group-addon">.php</div>
</div>
</div>
</div>
<br><hr>
<div class="col-md-6">Einzahltext<br><i>Max. 40 Zeichen</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="einzahltext" value="'. $daten->einzahltext .'" ></div>
<br><hr>
<div class="col-md-6">Auszahltext<br><i>Max. 40 Zeichen</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="auszahltext" value="'. $daten->auszahltext .'" ></div>
<br><hr>
<div class="col-md-6">Minimum Einzahlsumme<br><i>0 = Ohne Einschränkung</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="einzahlsumme" value="'. $daten->einzahlsumme .'" ></div>
<br><hr>
<div class="col-md-6">Minimum Auszahlsumme<br><i>0 = Ohne Einschränkung</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="auszahlsumme" value="'. $daten->auszahlsumme .'" ></div>
<br><hr>
<div class="col-md-6">Max. Schnittstellenanfragen (Tag)<br><i>0 = Ohne Einschränkung Nur für Anmeldungen</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="anfragen_tag" value="'. $daten->anfragen_tag .'" ></div>
<br><hr>
<div class="col-md-6">Max. Schnittstellenanfragen (User)<br><i>0 = Ohne Einschränkung Nur Ein./Auszahlungen</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="anfragen_user" value="'. $daten->anfragen_user .'" ></div>
<br><hr>
<div class="col-md-6">Status</div>
<div class="col-md-6">
<div class="checkbox">
<label>
<input type="checkbox" name="aktiv" '. $aktiv['aktiv'] .'>Aktiv
</label>
</div>
<div class="checkbox">
<label>
<input type="checkbox" name="aktiv_ein" '. $aktiv['aktiv_ein'] .'>Einzahlung aktivieren
</label>
</div>
<div class="checkbox">
<label>
<input type="checkbox" name="aktiv_aus" '. $aktiv['aktiv_aus'] .'>Auszahlung aktivieren
</label>
</div>
</div>
<br><hr>
<div class="col-md-6">W&auml;hrungsname</div>
<div class="col-md-6"><input class="form-control" type="Text" name="waehrung_name" value="'. $daten->waehrung_name.'" ></div>
<br><hr>
<div class="col-md-6">XX&nbsp;Punkt&nbsp;* XX =&nbsp;XX Externen&nbsp;Waehrung</div>
<div class="col-md-6"><input class="form-control" type="Text" name="punktewert" value="'. $daten->punktewert .'" ></div>
<br><hr>
<div class="col-md-6">XX Externe&nbsp;Waehrung&nbsp;/ XX=&nbsp;= XX&nbsp;Punkt</div>
<div class="col-md-6"><input class="form-control" type="Text" name="wertepunkt" value="'. $daten->wertepunkt .'" ></div>
<br><hr>
<div class="col-md-6">
<input class="btn btn-danger btn-block" type="Submit" name="run[updaten_betreiberdaten]" value="Loeschen !">
</div>
<div class="col-md-6">
<input class="btn btn-success btn-block" type="Submit" name="run[updaten_betreiberdaten]" value="Updaten">
</div>
</div>
</form>
</div>
';
return $aus;
}
function neu_anlegen(){
$aus = '
<form action="" method="post">
<input class="form-control" type="hidden" name="schnittstelle">
<div class="row">
<div class="col-md-6">Name der Schnitstelle</div>
<div class="col-md-6"><input type="text" class="form-control" name="name" required></div>
<br><hr>
<div class="col-md-6">Betreiber-ID</div>
<div class="col-md-6"><input class="form-control" type="Text" name="betreiber_id" required></div>
<br><hr>
<div class="col-md-6">Betreiberpasswort</div>
<div class="col-md-6"><input class="form-control" type="Text" name="betreiber_passwort" required></div>
<br><hr>
<div class="col-md-6">Betreiberkennung<br><i>Sofern notwendig</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="betreiber_kennung"></div>
<br><hr>
<div class="col-md-6">Schnittstelle<br><i>Dateiname der Schnittstelle</i></div>
<div class="col-md-6">
<div class="input-group mb-3">
<input type="text" class="form-control" name="schnittstelle" required>
<div class="input-group-append">
<span class="input-group-text" id="basic-addon2">.php</span>
</div>
</div>
</div>
<br><hr>
<div class="col-md-6">Einzahltext<br><i>Max. 40 Zeichen</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="einzahltext" required></div>
<br><hr>
<div class="col-md-6">Auszahltext<br><i>Max. 40 Zeichen</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="auszahltext" required></div>
<br><hr>
<div class="col-md-6">Minimum Einzahlsumme<br><i>0 = Ohne Einschränkung</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="einzahlsumme" required></div>
<br><hr>
<div class="col-md-6">Minimum Auszahlsumme<br><i>0 = Ohne Einschränkung</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="auszahlsumme" required></div>
<br><hr>
<div class="col-md-6">Max. Schnittstellenanfragen (Tag)<br><i>0 = Ohne Einschränkung Nur für Anmeldungen</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="anfragen_tag" required></div>
<br><hr>
<div class="col-md-6">Max. Schnittstellenanfragen (User)<br><i>0 = Ohne Einschränkung Nur Ein./Auszahlungen</i></div>
<div class="col-md-6"><input class="form-control" type="Text" name="anfragen_user" required></div>
<br><hr>
<div class="col-md-6">Status</div>
<div class="col-md-6">
<div class="checkbox">
<label>
<input type="checkbox" name="aktiv">Aktiv
</label>
</div>
<div class="checkbox">
<label>
<input type="checkbox" name="aktiv_ein">Einzahlung aktivieren
</label>
</div>
<div class="checkbox">
<label>
<input type="checkbox" name="aktiv_aus">Auszahlung aktivieren
</label>
</div>
</div>
<br><hr>
<div class="col-md-6">W&auml;hrungsname</div>
<div class="col-md-6"><input class="form-control" type="Text" name="waehrung_name" required></div>
<br><hr>
<div class="col-md-6">XX&nbsp;Punkt&nbsp;* XX =&nbsp;XX Externen&nbsp;Waehrung</div>
<div class="col-md-6"><input class="form-control" type="Text" name="punktewert" required></div>
<br><hr>
<div class="col-md-6">XX Externe&nbsp;Waehrung&nbsp;/ XX=&nbsp;= XX&nbsp;Punkt</div>
<div class="col-md-6"><input class="form-control" type="Text" name="wertepunkt" required></div>
<br><hr>
<div class="col-md-6">
</div>
<div class="col-md-6">
<input class="btn btn-success btn-block" type="Submit" name="run[updaten_betreiberdaten]" value="Hinzuf&uuml;gen !">
</div>
</div>
</form>
';
return $aus;
}
}
?>
adminforce/lib/class/betteln.class.php 0 → 100644
View file @ bfeadae2
<?php
class betteln{
private $db;
private $gconfig;
private $post = array();
private $error = 0;
private $meldung;
public function __construct(){
global $datenbank,$grundconfig;
$this->db = $datenbank;
$this->gconfig = $grundconfig;
}
private function make_array($post){
foreach($post AS $key => $value){
if($key != '' && $key != 'run' && $value != ''){
$this->post[$key] = $this->db->escape($value);
}
}
}
public function Uebersicht(){
return '
<div class="row">
<div class="col-6">
<div class="card">
<div class="card-header">Bettellink aufrufe</div>
<div class="card-body">
'. $this->Aufrufe() .'
</div>
</div>
</div>
<div class="col-6">
<div class="card">
<div class="card-header">Gesperrte URL\'s</div>
<div class="card-body">
'. $this->Sperre() .'
</div>
</div>
</div>
<div class="w-100"></div>
<div class="col-6">
<div class="card">
<div class="card-header">Bettellog <small>die letzten 100 Eintr&auml;ge</small></div>
<div class="card-body">
'. $this->liste() .'
</div>
</div>
</div>
</div>
';
}
private function Sperre(){
$aus = '<ul class="list-group">';
foreach($this->db->get_results("SELECT * FROM ". PREFIX . BETTELURLS ." ") AS $res){
$aus .= '
<li class="list-group-item">
<form method="post" action="">
<input type="hidden" name="id" value="'. $res->id .'">
<div class="row">
<div class="col-4">'. $res->url .'</div>
<div class="col-4">'. date("d.m.Y", $res->datum) .'</div>
<div class="col-4"><input type="submit" name="run[BettelURLSperreDelete]" class="btn btn-success" value="Entsperren"></div>
</div>
</form>
</li>
';
}
$aus .= '</ul>';
return $aus;
}
private function Aufrufe(){
$array = array();
foreach($this->db->get_results("SELECT * FROM ". PREFIX . BETTELB ." ") AS $res){
if(array_key_exists($res->refferer,$array)){
$array[$res->refferer] += 1;
}else{
$array[$res->refferer] = 1;
}
}
$aus = '<ul class="list-group">';
foreach($array AS $key => $value){
$aus .= '
<li class="list-group-item">
<form method="post" action="">
<input type="hidden" name="url" value="'. $key .'">
<div class="row">
<div class="col-4">'.$key.'</div>
<div class="col-4">'.$value.'</div>
<div class="col-4">';
if($this->db->num_rows("SELECT id FROM ". PREFIX . BETTELURLS ." WHERE url = '$key' ") == 0){
$aus .= '<input type="submit" name="run[BettelURLSperre]" value="Sperren" class="btn btn-danger">';
}
$aus .= '</div>
</div>
</form>
</li>
';
}
$aus .= '</ul>';
return $aus;
}
private function Liste(){
$aus = '<ul class="list-group">';
foreach($this->db->get_results("SELECT * FROM ". PREFIX . BETTELB ." ORDER BY id DESC LIMIT 100") AS $res){
if($res->status == 0){ $css = 'danger';}else{ $css = 'success';}
$aus .= '
<li class="list-group-item list-group-item-'. $css .'">
<div class="row">
<div class="col-3">'. date("d.m.Y H:i",$res->zeit) .'</div>
<div class="col-3">'. $res->uid .'</div>
<div class="col-3">'. $res->refferer .'</div>
<div class="col-3">'. number_format($res->betrag,2,',','.') .' '. $this->gconfig->waehrung .'</div>
</div>
</li>
';
}
$aus .= '</ul>';
return $aus;
}
public function URLSperren($post){
$this->make_array($post);
$this->post['datum'] = time();
if($this->db->insert(PREFIX . BETTELURLS, $this->post) == true){
$this->meldung = BETTELT['sperren']['true'];
}else{
$this->error = 1;
$this->meldung = BETTELT['sperren']['false'];
}
meldung($this->error,$this->meldung);
}
public function URLEntsperren($post){
$this->make_array($post);
if($this->db->delete(PREFIX . BETTELURLS, $this->post, 1) == true){
$this->meldung = BETTELT['entsperren']['true'];
}else{
$this->error = 1;
$this->meldung = BETTELT['entsperren']['false'];
}
meldung($this->error,$this->meldung);
}
}
\ No newline at end of file
adminforce/lib/class/bilanz.class.php 0 → 100644
View file @ bfeadae2
<?php
class bilanz{
private $db;
public function __construct(){
global $datenbank;
$this->db = $datenbank;
}
private function TCSS($row){
if($row < 0){
return 'table-danger';
}else{
return 'table-success';
}
}
public function ShowTable(){
$i = 1;
$aus = '
<table class="table" id="BilanzTable">
<thead>
<tr>
<th>#</th>
<th>Datum</th>
<th class="text-right">Einnahmen</th>
<th class="text-right">Ausgaben</th>
<th class="text-right">Bilanz</th>
<th></th>
</tr>
</thead>
<tbody>
';
foreach($this->db->get_results("SELECT SUM(ein) AS ges_ein, SUM(aus) AS ges_aus, datum FROM ". PREFIX . BILANZ ." GROUP BY datum ORDER BY datum DESC") AS $res){
$bilanz = $res->ges_ein-$res->ges_aus;
$aus .= '
<tr class="'. $this->TCSS($bilanz) .'">
<td>'. $i .'</td>
<td>'. date("d.m.Y", $res->datum) .'</td>
<td class="text-right">'. number_format($res->ges_ein,2,',','.') .'</td>
<td class="text-right">'. number_format($res->ges_aus,2,',','.') .'</td>
<td class="text-right">'. number_format($bilanz,2,',','.') .'</td>
<td class="text-center"><a href="?page=/bilanzsystem&TID='. $res->datum .'" class="btn btn-info btn-sm">Details</a></td>
</tr>
';
$i++;
}
$aus .= '</tbody></table>';
return $aus;
}
private function ShowDetails($gruppe,$date){
$aus = '
<table class="table table-hover">
<tr>
<th>Typ</th>
<th class="text-right">Einnahmen</th>
<th class="text-right">Ausgaben</th>
</tr>
';
foreach($this->db->get_results("SELECT * FROM ". PREFIX . BILANZ ." WHERE gruppe = '$gruppe' AND datum = '$date'") AS $res){
if($res->ein < $res->aus){ $css = 'table-danger';}else{ $css = 'table-success';}
$aus .= '
<tr class="'. $css .'">
<td>'. $res->name .'</td>
<td class="text-right">'. number_format($res->ein,2,',','.') .'</td>
<td class="text-right">'. number_format($res->aus,2,',','.') .'</td>
</tr>
';
}
return $aus.'</table>';
}
public function ShowDate($date){
if((int)$date){
$aus = array("head" => '', "body" => '');
$i = 1;
foreach($this->db->get_results("SELECT * FROM ". PREFIX . BILANZ ." WHERE datum = '". $date ."' GROUP BY gruppe") AS $res){
if($i == 1){ $aktive = 'active'; $show = 'show';}else{$aktive = ''; $show = '';}
$aus['head'] .= '
<a class="nav-link '. $aktive .'" id="nav-'. $res->id .'-tab" data-toggle="tab" href="#nav-'. $res->id .'" role="tab" aria-controls="nav-'. $res->id .'" aria-selected="true">'. $res->gruppe .'</a>
';
$aus['body'] .= '
<div class="tab-pane fade '. $show .' '. $aktive .'" id="nav-'. $res->id .'" role="tabpanel" aria-labelledby="nav-'. $res->id .'-tab">
'. $this->ShowDetails($res->gruppe,$date) .'
</div>
';
$i++;
}
return '
<nav>
<div class="nav nav-tabs" id="nav-tab" role="tablist">
'. $aus['head'] .'
</div>
</nav>
<div class="tab-content" id="nav-tabContent">
'. $aus['body'] .'
</div>
<a href="'. $_SERVER['HTTP_REFERER'] .'" class="btn btn-warning">Zur&uuml;ck</a>
';
}else{
return 'Falsche Zeitangabe';
}
}
}
\ No newline at end of file
adminforce/lib/class/buchungen.class.php 0 → 100644
View file @ bfeadae2
<?php
class buchungen{
private $db;
function __construct(){
global $datenbank;
$this->db = $datenbank;
}
public function Auflisten(){
$aus = '
<table class="table" id="UserBuchung">
<thead>
<tr>
<th>#</th>
<th>User</th>
<th>Datum</th>
<th>Zeit</th>
<th>Buchungs-ID</th>
<th>Buchungsmenge</th>
<th>Verwendungszweck</th>
<th>Buchung Eroflgreich</th>
</tr>
</thead>
<tbody>';
foreach($this->db->get_results("SELECT * FROM ". PREFIX . BUCH ." ORDER BY id DESC ") AS $res){
if($res->buchung_ok == 1){
$ok = '<img src="https://img.icons8.com/material/24/000000/checked.png" style="color:green;">';
}else{
$ok = '<img src="https://img.icons8.com/material/24/000000/close-window.png" style="color:red">';
}
$aus .= '
<tr>
<td>'. $res->id .'</td>
<td>'. $res->uid .'</td>
<td>'. date("d.m.Y",$res->buchungszeit) .'</td>
<td>'. date("H:i",$res->buchungszeit) .'</td>
<td>'. $res->buchungs_id .'</td>
<td>'. number_format($res->buchungsmenge,2,',','.') .'</td>
<td>'. $res->verwendungszweck .'</td>
<td>'. $ok .'</td>
</tr>
';
}
$aus .= '</tbody></table>';
return $aus;
}
}
adminforce/lib/class/bver.class.php 0 → 100644
View file @ bfeadae2
<?php
class bver{
private $db;
private $art;
private $error = 0;
private $meldung;
private $array = array();
function __construct(){
global $datenbank;
$this->db = $datenbank;
}
public function set_art($art){
if($art == 'user'){ $this->art = B_US;}
if($art == 'admin'){ $this->art = B_AD;}
}
private function make_array($post){
foreach($post AS $key => $value){
if($key != '' && $key != 'run' && $value != ''){
$this->array[$this->db->escape($key)] = $this->db->escape($value);
}
}
}
private function select($id){
$aus = '
<select name="sichtbar" class="form-control">
<option value="0"'; if($id == 0){ $aus .= 'selected="selected';} $aus .= '>nicht sichtbar</option>
<option value="1"'; if($id == 1){ $aus .= 'selected="selected';} $aus .= '>User</option>
<option value="2"'; if($id == 2){ $aus .= 'selected="selected';} $aus .= '>G&auml;ste/User</option>
</select>';
return $aus;
}
public function Liste(){
$aus = '
<ul class="list-group">
<li class="list-group-item">
<div class="row">
<div class="col-md-4">Name der Box</div>
<div class="col-md-4">Ordnungszahl</div>
<div class="col-md-4"></div>
</div>
</li>
';
foreach($this->db->get_results("SELECT * FROM ". PREFIX . $this->art ." ") AS $res){
$aus .= '
<li class="list-group-item">
<form method="post" action="">
<input type="hidden" name="id" value="'.$res->id.'">
<div class="row">
<div class="col"><input type="text" class="form-control" name="name" value="'.$res->name.'"></div>
<div class="col"><input type="number" class="form-control" name="ordnung" size="3" value="'.$res->ordnung.'"></div>';
if($this->art == 'box_user'){ $aus .= '<div class="col-md-3">'. $this->select($res->sichtbar) .'</div>';}
$aus .= '
<div class="col text-center">
<input type="submit" class="btn btn-success glyphicon glyphicon-ok-circle" name="run['.$this->art.'_box_aendern]" value="&Auml;ndern">&nbsp;
<input type="submit" class="btn btn-danger glyphicon glyphicon-remove-circle" name="run['.$this->art.'_box_loschen]" value="L&ouml;schen">
</div>
</div>
</form>
</li>
';
}
$aus .= '</ul>';
return $aus;
}
private function SaveDB(){
if($this->db->update(PREFIX . $this->art, $this->array, array("id" => $this->array['id'])) == true){
$this->meldung = BOX_EDIT_TRUE;
}else{
$this->error = 1;
$this->meldung = BOX_EDIT_FALSE;
}
}
public function Edit($post){
$this->make_array($post);
$this->SaveDB();
meldung($this->error,$this->meldung);
}
public function Save($post){
$this->make_array($post);
$this->AddDB();
meldung($this->error,$this->meldung);
}
public function Delete($post){
$this->make_array($post);
if(!isset($array['uid'])){ $array['uid'] = 0;}
$this->DeleteDB();
meldung($this->error,$this->meldung);
}
private function DeleteDB(){
if($this->db->delete(PREFIX . $this->art, array("id" => $this->array['id']),1) == true){
$this->meldung = BOX_DELETE_TRUE;
}else{
$this->error = 1;
$this->meldung = BOX_DELETE_FALSE;
}
}
private function AddDB(){
if($this->db->insert(PREFIX . $this->art, $this->array) == true){
$this->meldung = BOX_SAVE_TRUE;
}else{
$this->error = 1;
$this->meldung = BOX_SAVE_FALSE;
}
}
}
adminforce/lib/class/chat.class.php 0 → 100644
View file @ bfeadae2
<?php
class chat{
private $db;
private $id = 0;
private $error = 0;
private $meldung;
private $post = array();
const upload_folder = 'images/chat/';
const allowed_extensions = array('png', 'jpg', 'jpeg', 'gif');
const max_size = 5120*1024;
const allowed_types = array(IMAGETYPE_PNG, IMAGETYPE_JPEG, IMAGETYPE_GIF);
private $filename;
private $extension;
function __construct(){
global $datenbank;
$this->db = $datenbank;
}
public function SettingSave($post){
$this->make_array($post);
$this->save();
meldung($this->error,$this->meldung);
}
private function save(){
if($this->db->update(PREFIX . CHATSE, $this->post, array("id" => 1)) == true){
$this->meldung = CHAT_SETTING_SAVE_TRUE;
}else{
$this->error = 1;
$this->meldung = CHAT_SESSTING_SAVE_FALSE;
}
}
private function make_array($post){
foreach($post AS $key => $value){
if($key != '' && $key != 'run' && $value != ''){
$this->post[$key] = $this->db->escape($value);
}
}
}
public function Verlauf(){
$aus = '<ul class="list-group">';
foreach($this->db->get_results("SELECT * FROM ". PREFIX . CHAT ." ORDER BY id DESC LIMIT 100") AS $res){
$aus .= '
<li class="list-group-item">
<form method="post" action="">
<input type="hidden" name="id" value="'.$res->id.'">
<div class="row">
<div class="col-md-2">'.$res->absender.'</div>
<div class="col-md-9">'.$res->nachricht.'</div>
<div class="col-md-1"><input type="submit" name="run[chat_nachricht_loeschen]" class="btn btn-danger" value="L&ouml;schen"></div>
</div>
</form>
</li>';
}
$aus .= '</ul>';
return $aus;
}
public function DeleteMessage($id){
if(is_numeric($id['id'])){ $this->id = htmlspecialchars($id['id']);}
$this->delete();
meldung($this->error,$this->meldung);
}
private function delete(){
if($this->db->delete(PREFIX . CHAT,array("id" => $this->id)) == true){
$this->meldung = CHAT_DELETE_TRUE;
}else{
$this->error = 1;
$this->meldung = CHAT_DELETE_FALSE.$this->db->error();
}
}
private function CheckDateiendung(){
if(!in_array($this->extension, self::allowed_extensions)) {
$this->error = 1;
$this->meldung = PICUPLOADEXTENSENFALSE;
}
}
private function MaxSize($files){
if($files['datei']['size'] > self::max_size) {
$this->error = 1;
$this->meldung = PICUPLOADMAXSIZE;
}
}
private function ErrorFiles($files){
if(function_exists('exif_imagetype')) {
$detected_type = exif_imagetype($files['datei']['tmp_name']);
if(!in_array($detected_type, self::allowed_types)) {
$this->error = 1;
$this->meldung = PICUPLOADERRORFILES;
}
}
}
private function CheckExist(){
if($this->db->num_rows("SELECT id FROM ". PREFIX . CHATP ." WHERE kurz = '". $this->post['kurz'] ."' ") != 0){
$this->error = 1;
$this->meldung = CHATSMILEYKURZEXIST;
}
}
public function SmileyUpload($post,$files){
$this->make_array($post);
$this->filename = pathinfo($files['datei']['name'], PATHINFO_FILENAME);
$this->extension = strtolower(pathinfo($files['datei']['name'], PATHINFO_EXTENSION));
$this->CheckExist();
if($this->error == 0) $this->CheckDateiendung();
if($this->error == 0) $this->MaxSize($files);
if($this->error == 0) $this->ErrorFiles($files);
if($this->error == 0){
$new_path = $_SERVER['DOCUMENT_ROOT'].'/'.self::upload_folder . $this->filename .'.'.$this->extension;
move_uploaded_file($files['datei']['tmp_name'], $new_path);
$this->db->insert(PREFIX . CHATP , array("kurz" => $this->post['kurz'], "pic" => $this->filename .'.'.$this->extension));
$this->meldung = CHATSMILEYUPLOADTRUE;
}
meldung($this->error,$this->meldung);
}
public function SmileyAnsicht(){
$aus = '<div class="row" style="max-height:500px; overflow:auto">';
foreach($this->db->get_results("SELECT * FROM ". PREFIX . CHATP ." ") AS $res){
$aus .= '
<div class="col">
<form method="post" action="">
<input type="hidden" name="id" value="'. $res->id .'">
<img src="'. IMGtoBase64 ( $res->pic, 'chat' ) .'"><br>
<small>'. $res->kurz .'</small><br>
<input type="submit" name="run[SmileyDelete]" value="L&ouml;schen" class="btn btn-danger btn-sm">
</form>
</div>
';
}
$aus .= '</div>';
return $aus;
}
public function SmileyDelete($post){
$this->make_array($post);
$row = $this->db->get_row("SELECT pic FROM ". PREFIX . CHATP ." WHERE id = '". $this->post['id'] ."' ");
if($this->db->delete(PREFIX . CHATP, array("id" => $this->post['id'])) == true){
$this->meldung = SMILEYDELETETRUE;
unlink($_SERVER['DOCUMENT_ROOT'].'/images/chat/'. $row[0]);
}else{
$this->error = 1;
$this->meldung = SMILEYDELETEFALSE;
}
meldung($this->error,$this->meldung);
}
}
adminforce/lib/class/cms.class.php 0 → 100644
View file @ bfeadae2
<?php
class cms{
private $db;
private $post = array();
function __construct(){
global $datenbank;
$this->db = $datenbank;
}
public function BoxWahl($id = 0){
$aus = '';
foreach($this->db->get_results("SELECT id,name FROM ". PREFIX . B_US ." ") AS $res){
if($id == $res->id){ $selec = 'selected="selected"';}else{ $selec = '';}
$aus .= '<option value="'. $res->id .'" '. $selec .'>'. $res->name .'</option>';
}
return $aus;
}
public function LinkZugriff($id){
$aus = '
<option value="1"'; if($id == 1) { $aus .= 'SELECTED';} $aus .= '>Eingeloggte User</option>
<option value="2"'; if($id == 2) { $aus .= 'SELECTED';} $aus .= '>G&auml;ste</option>
<option value="3"'; if($id == 3) { $aus .= 'SELECTED';} $aus .= '>Alle</option>
';
return $aus;
}
public function EditSave($post){
$this->make_array($post);
$array = array(
"titel" => $this->post['titel'],
"text" => $this->post['text'],
"sichtbar" => $this->post['sichtbar']
);
if($this->db->update(PREFIX . CMS, $array, array("id" => $this->post['cms_id'])) == true && $this->LinkUpdate() == true){
meldung(0,CMS_EDIT_SAVE_TRUE);
}else{
meldung(1,CMS_EDIT_SAVE_FALSE);
}
}
private function make_array($post){
foreach($post AS $key => $value){
if($key != '' && $key != 'seite_save' && $key != 'seite_bearbeiten'){
$this->post[$key] = $this->db->escape($value);
}
}
}
private function LinkEintragen($id){
$array = array(
"link" => 'cms/seite&id='.$id,
"name" => $this->post['name'],
"ordnung" => $this->post['ordnung'],
"box" => $this->post['box'],
"cms_id" => $id
);
$this->db->insert(PREFIX . M_US, $array);
}
private function LinkUpdate(){
$array = array(
"name" => $this->post['name'],
"ordnung" => $this->post['name'],
"box" => $this->post['box']
);
$return = $this->db->update(PREFIX . M_US, $array, array("cms_id" => $this->post['cms_id']));
return $return;
}
public function BoxSave($post){
$this->make_array($post);
$array = array(
"titel" => $this->post['titel'],
"text" => $this->post['text'],
"sichtbar" => $this->post['sichtbar']
);
if($this->db->insert(PREFIX . CMS, $array) == true){
$this->LinkEintragen($this->db->lastid());
meldung(0,CMS_SEITE_SAVE_TRUE);
}else{
meldung(1,CMS_SEITE_SAVE_FALSE);
}
}
public function ListeSeiten(){
$aus = '';
foreach($this->db->get_results("SELECT id,titel,text FROM ". PREFIX . CMS ." ") AS $res){
$aus .= '
<form method="post" action="">
<input type="hidden" name="seiten_id" value="'.$res->id.'">
<tr>
<td>'. $res->id .'</td>
<td>'. $res->titel .'</td>
<td><code>'. shortText($res->text,200) .'</code></td>
<td><a class="btn btn-info" href="?page=/cms/detail_seiten&id='. $res->id .'">Bearbeiten</a>&nbsp;
<input type="submit" class="btn btn-danger" name="run[seite_loeschen]" value="Seite l&ouml;schen"></td>
</tr>
</form>
';
}
return $aus;
}
public function SeiteDelete($post){
$this->make_array($post);
if($this->db->num_rows("SELECT id FROM ". PREFIX . CMS ." WHERE id = '". $this->post['seiten_id'] ."' ") == 1){
if(
$this->db->delete(PREFIX . CMS, array("id" => $this->post['seiten_id']),1) == true &&
$this->db->delete(PREFIX . M_US, array("cms_id" => $this->post['seiten_id']),1) == true){
meldung(0,CMS_DELETE_TRUE);
}else{
meldung(1,CMS_DELETE_FALSE);
}
}else{
meldung(1,CMS_SEITE_DELETE_NO);
}
}
}
adminforce/lib/class/crons.class.php 0 → 100644
View file @ bfeadae2
<?php
class crons{
private $db;
private $config;
function __construct(){
global $datenbank,$grundconfig;
$this->db = $datenbank;
$this->config = $grundconfig;
}
public function liste(){
$aus = '<table class="table table-striped">
<tr>
<th>Cron</th>
<th>Laufzeit</th>
<th>URL</th>
</tr>';
$result = $this->db->get_results("SELECT * FROM ". PREFIX . CRONS ." ");
foreach($result AS $res){
$aus .= '
<tr>
<td><b>' . $res->bezeichnung . '</b><br>
<small><i>ID: ' . $res->id . '</i></small>
</td>
<td class="text-center">
<font color="#000080">' . date("d.m.Y - H:i:s", $res->laufzeit) . '</font>
</td>
<td class="text-center">
<a href="../cron.php?id=' . $res->id . '&amp;pw=' . $this->config->cron_pw . '" target="_blank"><img src="images/gruen.gif" width="15" height="15" border="0" alt="Ausführen"></a>
</td>
</tr>
';
}
$aus .= '</table>';
return $aus;
}
}
\ No newline at end of file
adminforce/lib/class/grundeinstellung.class.php 0 → 100644
View file @ bfeadae2
<?php
class grundeinstellung{
private $db;
private $post = array();
private $error = 0;
private $meldung = '';
private $config;
function __construct(){
global $datenbank,$grundconfig;
$this->db = $datenbank;
$this->config = $grundconfig;
}
public function Save($post){
$this->make_array($post);
if(isset($this->post['start_seite'])){
$this->post['start_seite'] = strtotime($this->post['start_seite'].'T00:00:00');
}
if($this->db->update(PREFIX . CONFIG , $this->post) == true){
$this->meldung = PAGECONFIG_SAVE_TRUE;
}else{
$this->error = 1;
$this->meldung = PAGECONFIG_SAVE_FALSE;
}
meldung($this->error,$this->meldung);
}
private function make_array($post){
foreach($post AS $key => $value){
if($key != '' && $key != 'run'&& $value != ''){
if($key == 'wartung'){if($key == 'wartung'){$value = 1;}else{$value = 0;}}
if($key == 'anzeige_chat'){if($key == 'anzeige_chat'){ $value = 1;}else{ $value = 0;}}
if($key == 'anzeige_text'){if($key == 'anzeige_text'){ $value = 1;}else{ $value = 0;}}
$this->post[$key] = $this->db->escape(htmlspecialchars($value));
}
}
}
public function Refliste(){
$aus = '<form method="post" action="">
<div class="form-group">
<label for="exampleInputEmail1">Anzahl Refebenen</label>
<input type="number" class="form-control" name="AnzrefEbenen" value="'.$this->config->RefEbenen .'">
<small id="emailHelp" class="form-text text-muted">Sollten es mehr Refebenen werden, bitte erst die Anzahl Speichern und dann die Verg&uuml;tungen eintragen</small>
</div>
<div class="row">';
$ii = 1;
$explode = explode(";",$this->config->RefVerg);
for($i = 1; $i <= $this->config->RefEbenen; $i++){
if(isset($explode[$i-1])){ $eexplode = $explode[$i-1];}else{ $eexplode = 0;}
$aus .= '
<div class="col">
<div class="input-group mb-3">
<div class="input-group-prepend">
<span class="input-group-text" id="basic-addon1">Ebene '. $i .'</span>
</div>
<input type="text" class="form-control text-right" name="refebenen['.$i.']" value="'. $eexplode .'">
<div class="input-group-append">
<span class="input-group-text" id="basic-addon1">%</span>
</div>
</div>
</div>';
if($ii == 5){
$aus .= '</div><div class="row">';
$ii = 1;
}else{
$ii++;
}
}
$aus .= '</div><input type="submit" name="run[refebenenSave]" value="Speichern" class="btn btn-success btn-block"></form>';
return $aus;
}
public function RefVergSave($post){
if(is_numeric($post['AnzrefEbenen'])){ $AnzRefEbenen = $post['AnzrefEbenen'];}else{ $AnzRefEbenen = 0;}
if(empty($post['refebenen'])){ $refebenen = 0;}else{ $refebenen = implode(";",$post['refebenen']);}
if($this->db->update(PREFIX . CONFIG, array("RefEbenen" => $AnzRefEbenen, "RefVerg" => $refebenen), array("id" => 1)) == true){
meldung(0,REFEBENEN_SAVE_TRUE);
}else{
meldung(1,REFEBENEN_SAVE_FALSE);
}
}
public function AdminPWUpdate($post){
if($this->db->update(PREFIX . CONFIG, array("admin_name" => base64_encode($this->db->escape($post['admin_name'])), "admin_pass" => pw_erstellen($post['admin_pass'])), array("id" => 1),1) == true){
meldung(0,ADMIN_PASS_SAVE_TRUE);
}else{
meldung(1,ADMIN_PASS_SAVE_FALSE);
}
}
}
adminforce/lib/class/inaktive.class.php 0 → 100644
View file @ bfeadae2
<?php
class inaktive{
private $db;
private $config;
public function __construct(){
global $datenbank,$grundconfig;
$this->db = $datenbank;
$this->config = $grundconfig;
}
public function Suchen($zeit){
$aus = '
<table class="table table-striped" id="InaktiveSuchenTable">
<thead>
<tr>
<th>UID</th>
<th>Kontostand</th>
<th>Letzter Login</th>
</tr>
</thead>
<tbody>
';
foreach($this->db->get_results("SELECT uid,kontostand_a,last_active FROM ". PREFIX . KONTO ." WHERE last_active <= $zeit ") AS $res){
if($res->last_active == 0){ $datum = 'nie online';}else{ $datum = date("d.m.Y H:i",$res->last_active);}
$aus .= '
<tr>
<td>'. $res->uid .'</td>
<td>'. number_format($res->kontostand_a,2,',','.') .'</td>
<td>'. $datum .'</td>
</tr>
';
}
$aus .= '</tbody></table>';
return $aus;
}
public function Erinnern($zeit,$mail){
$i = 0;
foreach($this->db->get_results("SELECT uid FROM ". PREFIX . KONTO ." WHERE last_active <= $zeit ") AS $res){
$user = userinfo($res->uid);
$nachricht = ' Hallo '.$user->nickname.'<br>
Leider bist du seit Geraumer Zeit nicht mehr auf '.$this->config->seitenname.' Online gewesen.<br>
Um nicht vom System wegen inaktivität gelöscht zu werden,<br>
bitten wir dich das du dich kurz einmal auf '.$this->config->seitenname.' anmeldest<br>
und wenn du lust hast kannst du ja in zukunft auch noch aktive teilnehmen.<br>
<br>
MFG<br>
'.$this->config->seitenname.' ';
$mail->senden($user->emailadresse,'Inaktiver Account',$nachricht);
$i++;
}
return 'Es wurden '. $i .' Erinnerungen verschickt.';
}
public function Delete($zeit){
$i = 0;
foreach($this->db->get_results("SELECT uid FROM ". PREFIX . KONTO ." WHERE last_active <= $zeit ") AS $res){
$this->db->delete(PREFIX . KONTO, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . USER, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . WERBER, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . NICKP, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . EMAIL, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . BUCH_B, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . MK, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . MULTIK, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . RELOAD, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . BETTELB, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . NOTIZ, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . WERBUNG, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . CHAT, array("uid" => $res->uid),1);
$this->db->delete(PREFIX . NEWSK, array("uid" => $res->uid),1);
$i++;
}
return 'Es wurden '. $i .' Konten gel&ouml;scht.';
}
}
?>
adminforce/lib/class/konto.class.php 0 → 100644
View file @ bfeadae2
<?php
class konto{
private $uid;
private $betrag;
private $art;
private $verwendung;
private $empfanger;
private $db;
public function __construct(){
global $datenbank;
$this->db = $datenbank;
}
public function set_var($uid,$betrag,$art,$verwendung,$empfaenger = 0){
$this->set_uid($uid);
$this->set_betrag($betrag);
$this->set_art($art);
$this->set_verw($verwendung);
if($empfaenger != 0){ $this->set_empfaenger($empfaenger);}
if($art == '-'){
$this->abzug();
}else{
$this->gutschrift();
}
}
private function set_empfaenger($uid){
$this->empfanger = $uid;
}
private function set_verw($verw){
$this->verwendung = $verw;
}
private function set_uid($uid){
if(!is_numeric($uid)){ $this->uid = 0;}else{ $this->uid = $uid;}
}
private function set_betrag($betrag){
if(!is_numeric($betrag)){ $this->betrag = 0;}else{ $this->betrag = str_replace(",",".",$betrag);}
}
private function set_art($art){
$this->art = $art;
}
private function abzug(){
$konto = $this->kontostand();
$buchung_ok = $this->db->query("UPDATE ". PREFIX . KONTO ." SET kontostand_a = kontostand_a - $this->betrag WHERE uid = '$this->uid' ");
$this->buchungsliste($buchung_ok);
}
private function gutschrift(){
$konto = $this->kontostand();
$buchung_ok = $this->db->query("UPDATE ". PREFIX . KONTO ." SET kontostand_a = kontostand_a + $this->betrag WHERE uid = '$this->uid' ");
$this->buchungsliste($buchung_ok);
}
private function buchungsliste($buchung_ok){
$buch = array(
"uid" => $this->uid,
"buchungszeit" => time(),
"buchungs_id" => create_code(11),
"buchungsmenge" => $this->art . $this->betrag,
"verwendungszweck" => $this->verwendung
);
if($buchung_ok == true){ $buch['buchung_ok'] = 1;}
if($this->db->insert(PREFIX . BUCH , $buch) == true){
meldung(0,KONTO_BUCHUNG_TRUE);
}else{
meldung(1,KONTO_BUCHUNG_FALSE);
}
}
private function kontostand(){
$return = $this->db->get_row("SELECT kontostand_a FROM ". PREFIX . KONTO ." WHERE uid = '$this->uid' ",true);
return $return->kontostand_a;
}
}