View Single Post
  #18  
Old 09-08-2011, 05:56 PM
Chibi_Chicken Chibi_Chicken is offline
Niwatori Kami
 
Join Date: Jun 2011
Posts: 63
Gender: Unknown/Other
Credits: 5,224
Chibi_Chicken is on a distinguished road
Default

Here are the changes for the admin page.

Ok before making any changes the first step is to make backups.

now open admin.php

find starts around line 837
PHP Code:
                elseif($do == "new")
                {

                    
$article_title "Create a new page";
                    
$article_content "Here you can create a new page for your site.  You can use the buttons above the textarea below to insert BBCODE into the form.
                                        <br />
                                        <form name='form1' method='post' action='admpost.php'>
                                            <p>
                                                Page URL: 
                                                <input name='pageurl' type='text' id='pageurl'><br />
                                                <br /><u>Pages will appear at:</u><br /> http://www.
{$domain}{$scriptpath}/<b>pages.php?page=pageurl</b>  
                                                <br />The page url may contain letters and numbers only and may not include spaces.
                                            </p>
                                            <p>
                                                Page Title: 
                                                <input name='pagetitle' type='text' id='pagetitle'>
                                            </p>
                                            <p>Page Content: </p>
                                            <p>
                                                <input type=\"button\" value=\"Bold\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[b]Bold Text Here[/b]'\">
                                                <input type=\"button\" value=\"Italics\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[i]Italic Text Here[/i]'\"> 
                                                <input type=\"button\" value=\"Underline\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[u]Underlined Text Here[/u]'\">
                                                <input type=\"button\" value=\"URL / Link\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[url=http://www.yoursite.com]Link text goes here[/url]'\">
                                                <input type=\"button\" value=\"Image\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[img]http://www.somesite.com/images/someimage.gif[/img]'\">
                                                <input type=\"button\" value=\"Links a Text\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[urlsame=]Linked Text Here[/urlsame]'\">
                                                <input type=\"button\" value=\"Striking Format\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[s]Strike Text Here[/s]'\">
                                                <input type=\"button\" value=\"Youtube Video\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[youtube]http://www.youtube.com/videoname[/youtube]'\">
                                                <input type=\"button\" value=\"User Profile\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[profile]Username[/profile]'\">
                                                <input type=\"button\" value=\"Image Maps\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[imgmap]http://www.urlhere.com/[/imgmap]'\">
                                                <input type=\"button\" value=\"Map Locations\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[map][where=#,#,#,#=http://www.firstlinkhere.com/][wherecirc=#,#,#=http://www.secondinkhere.com/][/map]'\">

                                                <br /><textarea name='pagecontent' cols='45' rows='10' id='pagecontent'></textarea> 
                                            </p>
                                            <p>
                                                <input name='page' type='hidden' id='page' value='pages'>
                                                <input name='type' type='hidden' id='type' value='newpage'>
                                                <input type='submit' name='Submit' value='Create New Page'>
                                            </p>
                                        </form>"
;

                }
                elseif(
$do == "delete")
                {

                    
// Delete a page...

                    
if($more != "index" and $more != "tos")
                    {

                        
$query "DELETE FROM {$prefix}content WHERE page='{$more}'";
                        
runquery($query);

                        
$article_title "Page Deleted Successfully";
                        
$article_content "The page with the name <b>{$more}</b> has been deleted.<br /><br /><a href='admin.php'>ACP Home</a>";
                    }
                    else
                    {
                        
$article_title "Error";
                        
$article_content "The page you tried to delete is a special page and cannot be deleted. 
                                            <br /><br /> <a href='admin.php?set=content'>Return to the Pages Editor</a>"
;
                    }

                }
                elseif(
$do == "edit")
                {

                    
$article_title "Edit a Page";

                    if(
$more != "")
                    {

                        
$article_content "Here you can edit an existing page:<br />";

                        
//Select the page info from the database...

                        
$pageinfo getsitecontent($more);
                        
$pagetitle stripslashes($pageinfo[title]);
                        
$pagecontent stripslashes($pageinfo[content]);

                        if(
$pagetitle != "" or $pagecontent != "")
                        {

                            
$article_content .= "Here you can edit an existing page.  Use the text editor below to change the page title or content.
                                                You may use some limited BBCodes in the box below.<br />
                                                <form name='form1' method='post' action='admpost.php'>
                                                    <p>
                                                        <b><u>Currently Editing Page:</u> 
{$more}</b>
                                                        <input name='pageurl' type='hidden' id='pageurl' value='
{$more}'>
                                                    </p>
                                                    <p>
                                                        Page Title: 
                                                        <input name='pagetitle' type='text' id='pagetitle' value='
{$pagetitle}'>
                                                    </p>
                                                    <p>Page Content: </p>
                                                    <p>
                                                        <input type=\"button\" value=\"Bold\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[b]Bold Text Here[/b]'\">
                                                        <input type=\"button\" value=\"Italics\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[i]Italic Text Here[/i]'\"> 
                                                        <input type=\"button\" value=\"Underline\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[u]Underlined Text Here[/u]'\">
                                                        <input type=\"button\" value=\"URL / Link\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[url=http://www.yoursite.com]Link text goes here[/url]'\">
                                                        <input type=\"button\" value=\"Image\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[img]http://www.somesite.com/images/someimage.gif[/img]'\">
                                                        <input type=\"button\" value=\"Links a Text\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[urlsame=]Linked Text Here[/urlsame]'\">
                                                        <input type=\"button\" value=\"Striking Format\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[s]Strike Text Here[/s]'\">
                                                        <input type=\"button\" value=\"Youtube Video\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[youtube]http://www.youtube.com/videoname[/youtube]'\">
                                                        <input type=\"button\" value=\"User Profile\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[profile]Username[/profile]'\">
                                                        <input type=\"button\" value=\"Image Maps\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[imgmap]http://www.urlhere.com/[/imgmap]'\">
                                                        <input type=\"button\" value=\"Map Locations\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[map][where=#,#,#,#=http://www.firstlinkhere.com/][wherecirc=#,#,#=http://www.secondinkhere.com/][/map]'\">

                                                        <br /><textarea name='pagecontent' cols='45' rows='10' id='pagecontent'>
{$pagecontent}</textarea> 
                                                    </p>
                                                    <p>
                                                        <input name='page' type='hidden' id='page' value='pages'>
                                                        <input name='type' type='hidden' id='type' value='editpage'>
                                                        <input type='submit' name='Submit' value='Edit Page Content'>
                                                    </p>
                                                </form>"
;
                        }
                        else
                        {
                            
$article_title "Page does not exist";
                            
$article_content "<p>Page does not exist!</p>";
                        }
                    }
                    else
                    {

                        
$article_title "Page does not exist";
                        
$article_content "<p>Page does not exist!</p>";

                    }
                }

            }
            else
            {

                
$article_title "Access Denied";
                
$article_content "Your usergroup does not seem to have the permission to edit the site content settings...";

            }

        } 
// End the set=content block ... start a new setting here... 
and replace it with
PHP Code:
                elseif($do == "new")
                {

                    
$article_title "Create a new page";
                    
$article_content "Here you can create a new page for your site.  You can use the buttons above the textarea below to insert BBCODE into the form.
                                        <br />
                                        <form name='form1' method='post' action='admpost.php'>
                                            <p>
                                                Page URL: 
                                                <input name='pageurl' type='text' id='pageurl'><br />
                                                <br /><u>Pages will appear at:</u><br /> http://www.
{$domain}{$scriptpath}/<b>pages.php?page=pageurl</b>  
                                                <br />The page url may contain letters and numbers only and may not include spaces.
                                            </p>
                                            <p>
                                                Page Title: 
                                                <input name='pagetitle' type='text' id='pagetitle'>
                                            </p>
                                            <p>
                                                Page Password[ Leave blank for non passworded pages.]: 
                                                <input name='pagepassword' type='text' id='pagepassword'>
                                            </p>
                                            <p>Page Content: </p>
                                            <p>
                                                <input type=\"button\" value=\"Bold\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[b]Bold Text Here[/b]'\">
                                                <input type=\"button\" value=\"Italics\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[i]Italic Text Here[/i]'\"> 
                                                <input type=\"button\" value=\"Underline\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[u]Underlined Text Here[/u]'\">
                                                <input type=\"button\" value=\"URL / Link\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[url=http://www.yoursite.com]Link text goes here[/url]'\">
                                                <input type=\"button\" value=\"Image\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[img]http://www.somesite.com/images/someimage.gif[/img]'\">
                                                <input type=\"button\" value=\"Links a Text\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[urlsame=]Linked Text Here[/urlsame]'\">
                                                <input type=\"button\" value=\"Striking Format\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[s]Strike Text Here[/s]'\">
                                                <input type=\"button\" value=\"Youtube Video\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[youtube]http://www.youtube.com/videoname[/youtube]'\">
                                                <input type=\"button\" value=\"User Profile\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[profile]Username[/profile]'\">
                                                <input type=\"button\" value=\"Image Maps\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[imgmap]http://www.urlhere.com/[/imgmap]'\">
                                                <input type=\"button\" value=\"Map Locations\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[map][where=#,#,#,#=http://www.firstlinkhere.com/][wherecirc=#,#,#=http://www.secondinkhere.com/][/map]'\">

                                                <br /><textarea name='pagecontent' cols='45' rows='10' id='pagecontent'></textarea> 
                                            </p>
                                            <p>
                                                <input name='page' type='hidden' id='page' value='pages'>
                                                <input name='type' type='hidden' id='type' value='newpage'>
                                                <input type='submit' name='Submit' value='Create New Page'>
                                            </p>
                                        </form>"
;

                }
                elseif(
$do == "delete")
                {

                    
// Delete a page...

                    
if($more != "index" and $more != "tos")
                    {

                        
$query "DELETE FROM {$prefix}content WHERE page='{$more}'";
                        
runquery($query);

                        
$article_title "Page Deleted Successfully";
                        
$article_content "The page with the name <b>{$more}</b> has been deleted.<br /><br /><a href='admin.php'>ACP Home</a>";
                    }
                    else
                    {
                        
$article_title "Error";
                        
$article_content "The page you tried to delete is a special page and cannot be deleted. 
                                            <br /><br /> <a href='admin.php?set=content'>Return to the Pages Editor</a>"
;
                    }

                }
                elseif(
$do == "edit")
                {

                    
$article_title "Edit a Page";

                    if(
$more != "")
                    {

                        
$article_content "Here you can edit an existing page:<br />";

                        
//Select the page info from the database...

                        
$pageinfo getsitecontent($more);
                        
$pagetitle stripslashes($pageinfo[title]);
                        
$pagecontent stripslashes($pageinfo[content]);
                        
$pagepassword $pageinfo['password'];

                        if(
$pagetitle != "" or $pagecontent != "")
                        {

                            
$article_content .= "Here you can edit an existing page.  Use the text editor below to change the page title or content.
                                                You may use some limited BBCodes in the box below.<br />
                                                <form name='form1' method='post' action='admpost.php'>
                                                    <p>
                                                        <b><u>Currently Editing Page:</u> 
{$more}</b>
                                                        <input name='pageurl' type='hidden' id='pageurl' value='
{$more}'>
                                                    </p>
                                                    <p>
                                                        Page Title: 
                                                        <input name='pagetitle' type='text' id='pagetitle' value='
{$pagetitle}'>
                                                    </p>
                                                    <p>
                                                        Page Password[ Leave blank for non passworded pages.]: 
                                                        <input name='pagepassword' type='text' id='pagepassword' value='
$pagepassword'>
                                                    </p>
                                                    <p>Page Content: </p>
                                                    <p>
                                                        <input type=\"button\" value=\"Bold\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[b]Bold Text Here[/b]'\">
                                                        <input type=\"button\" value=\"Italics\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[i]Italic Text Here[/i]'\"> 
                                                        <input type=\"button\" value=\"Underline\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[u]Underlined Text Here[/u]'\">
                                                        <input type=\"button\" value=\"URL / Link\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[url=http://www.yoursite.com]Link text goes here[/url]'\">
                                                        <input type=\"button\" value=\"Image\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[img]http://www.somesite.com/images/someimage.gif[/img]'\">
                                                        <input type=\"button\" value=\"Links a Text\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[urlsame=]Linked Text Here[/urlsame]'\">
                                                        <input type=\"button\" value=\"Striking Format\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[s]Strike Text Here[/s]'\">
                                                        <input type=\"button\" value=\"Youtube Video\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[youtube]http://www.youtube.com/videoname[/youtube]'\">
                                                        <input type=\"button\" value=\"User Profile\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[profile]Username[/profile]'\">
                                                        <input type=\"button\" value=\"Image Maps\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[imgmap]http://www.urlhere.com/[/imgmap]'\">
                                                        <input type=\"button\" value=\"Map Locations\" onClick=\"document.forms['form1']. elements['pagecontent'].value=document.forms['form1']. elements['pagecontent'].value+'[map][where=#,#,#,#=http://www.firstlinkhere.com/][wherecirc=#,#,#=http://www.secondinkhere.com/][/map]'\">

                                                        <br /><textarea name='pagecontent' cols='45' rows='10' id='pagecontent'>
{$pagecontent}</textarea> 
                                                    </p>
                                                    <p>
                                                        <input name='page' type='hidden' id='page' value='pages'>
                                                        <input name='type' type='hidden' id='type' value='editpage'>
                                                        <input type='submit' name='Submit' value='Edit Page Content'>
                                                    </p>
                                                </form>"
;
                        }
                        else
                        {
                            
$article_title "Page does not exist";
                            
$article_content "<p>Page does not exist!</p>";
                        }
                    }
                    else
                    {

                        
$article_title "Page does not exist";
                        
$article_content "<p>Page does not exist!</p>";

                    }
                }

            }
            else
            {

                
$article_title "Access Denied";
                
$article_content "Your usergroup does not seem to have the permission to edit the site content settings...";

            }

        } 
// End the set=content block ... start a new setting here... 
save that then open admpost.php

find
PHP Code:
$pagename $_POST["pageurl"]; 
after that add
PHP Code:
            if (isset($_POST['pagepassword'])){
                
$pagepassword $_POST['pagepassword'];
                
$pagepassword secure($pagepassword); //secure has allerady ran on all of the get varables but I want to make sure it was called.
                
}
            else{
            
$pagepassword '';
            } 
next find
PHP Code:
$query "UPDATE {$prefix}content SET content='{$content}', title='{$title}' WHERE page='{$pagename}'"
replace it with
PHP Code:
$query "UPDATE {$prefix}content SET content='{$content}', title='{$title}', content_password='$pagepassword' WHERE page='{$pagename}'"
next find
PHP Code:
runquery("INSERT INTO {$prefix}content VALUES ('$pagename', '$title', '', '$content','')"); 
and replace it with.
PHP Code:
runquery("INSERT INTO {$prefix}content VALUES ('$pagename', '$title', '', '$content','','$pagepassword')"); 
That will then allow you to make the password changes to the page just using the admin page.
Let me know how that works out for you.
Reply With Quote