summaryrefslogtreecommitdiff
path: root/moe/includes/core.php
diff options
context:
space:
mode:
authorWubTheCaptain <wub@partyvan.eu>2015-09-15 19:36:21 +0200
committerpantsucat <contact@pantsu.cat>2015-09-16 06:31:43 +0200
commit9e8a8513b20cfd770429e35135516c6399444930 (patch)
tree3cddba0597ad293fda5588694fe018daa770fc88 /moe/includes/core.php
parent1415c210d67666ef5b8a26c109107d0ce5fe73c9 (diff)
Indent and format project to PSR-2 style
PSR-2 [1] is a highly regarded style guide in the PHP community according to Stack Overflow [2]. The indentation was out of place in the source code. I've seen a combination of 1 space tabs, 3 space tabs, 4 space tabs and 5 space tabs. Some closing braces on the same line and a lot of the code (especially moe code) had reached the point of losing readability. Converted with php-cs-fixer and some hand adjustment. [1]: http://www.php-fig.org/psr/psr-2/ [2]: https://stackoverflow.com/questions/3638083/list-of-highly-regarded -php-style-guides
Diffstat (limited to 'moe/includes/core.php')
-rw-r--r--moe/includes/core.php545
1 files changed, 286 insertions, 259 deletions
diff --git a/moe/includes/core.php b/moe/includes/core.php
index 2a522f5..d0ef9d0 100644
--- a/moe/includes/core.php
+++ b/moe/includes/core.php
@@ -1,76 +1,93 @@
<?php
-//error_reporting(E_ERROR | E_WARNING | E_PARSE);
// This file will handle all functions used by Pomf's Moe Panel
session_start();
-$db = new PDO('mysql:unix_socket=/var/run/mysqld/mysqld.sock;dbname=pomf', 'xxx', 'xxx', array(PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES 'UTF8'"));
-
-function register ($email, $pass, $code) {
- global $db;
- $do = $db->prepare("SELECT code, used, level FROM invites WHERE email = (:email)");
- $do->bindParam(':email', $email);
- $do->execute();
- $result = $do->fetch();
- if(!$result['code'] == $code){
- header('Location: ../register/index.html#fail2');
- }elseif($result['used'] == '1'){
- header('Location: ../register/index.html#fail3');
- }else{
- $do = $db->prepare("INSERT INTO accounts (email, pass, level) VALUES (:email, :pass, :level)");
- $do->bindParam(':email', $email);
- $do->bindParam(':level', $result['level']);
- $hash = password_hash($pass, PASSWORD_DEFAULT);
- $do->bindParam(':pass', $hash);
- $do->execute();
- $do = $db->prepare("UPDATE invites SET used = (:used) WHERE email = (:email)");
- $do->bindValue(':used', '1');
- $do->bindParam(':email', $email);
- $do->execute();
- $_SESSION['id'] = $result['id'];
- $_SESSION['email'] = $result['email'];
- header('Location: api.php?do=cp');
- }
-}
-function generate ($email, $level){
- global $db;
- if($_SESSION['level'] === '1'){
- $do = $db->prepare("INSERT INTO invites (email, code, level) VALUES (:email, :code, :level)");
- $do->bindParam(':email', $email);
- $code = generateRandomString();
- $do->bindParam(':code', $code);
- $do->bindParam(':level', $level);
- $do->execute();
- require_once('Mail.php');
- $from = "Invites <invites@pomf.se>";
- $to = $email;
- $subject = "Pomf.se Account Invite";
- $body = "This is a automated message from Pomf.se \n Your invite code is: ".$code."\n Your invite email is: ".$email." \n Access level: ".$level." \n Register at http://cayootie.pomf.se/user/register";
-
- $host = "xxx";
- $username = "xxx";
- $password = "xxx";
-
-$headers = array ('From' => $from,
- 'To' => $to,
- 'Subject' => $subject);
- $smtp = Mail::factory('smtp',
- array ('host' => $host,
- 'auth' => true,
- 'username' => $username,
- 'password' => $password));
-
- $mail = $smtp->send($to, $headers, $body);
+$db = new PDO(
+ 'mysql:unix_socket=/var/run/mysqld/mysqld.sock;dbname=pomf',
+ 'xxx',
+ 'xxx',
+ array(PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES 'UTF8'")
+);
+
+function register($email, $pass, $code) {
+ global $db;
+
+ $do = $db->prepare("SELECT code, used, level FROM invites WHERE email = (:email)");
+ $do->bindParam(':email', $email);
+ $do->execute();
+ $result = $do->fetch();
- if (PEAR::isError($mail)) {
- echo("<p>" . $mail->getMessage() . "</p>");
- } else {
- echo("<p>Message successfully sent!</p>");
- }
+ if (!$result['code'] == $code) {
+ header('Location: ../register/index.html#fail2');
+ } elseif ($result['used'] == '1') {
+ header('Location: ../register/index.html#fail3');
+ } else {
+ $do = $db->prepare("INSERT INTO accounts (email, pass, level) VALUES (:email, :pass, :level)");
+ $do->bindParam(':email', $email);
+ $do->bindParam(':level', $result['level']);
+ $hash = password_hash($pass, PASSWORD_DEFAULT);
+ $do->bindParam(':pass', $hash);
+ $do->execute();
+
+ $do = $db->prepare("UPDATE invites SET used = (:used) WHERE email = (:email)");
+ $do->bindValue(':used', '1');
+ $do->bindParam(':email', $email);
+ $do->execute();
- }else{
- echo 'What are you doing here? Go away!';
- }
+ $_SESSION['id'] = $result['id'];
+ $_SESSION['email'] = $result['email'];
+ header('Location: api.php?do=cp');
+ }
+}
+
+function generate($email, $level) {
+ global $db;
+
+ if ($_SESSION['level'] === '1') {
+ $do = $db->prepare("INSERT INTO invites (email, code, level) VALUES (:email, :code, :level)");
+ $do->bindParam(':email', $email);
+ $code = generateRandomString();
+ $do->bindParam(':code', $code);
+ $do->bindParam(':level', $level);
+ $do->execute();
+
+ require_once('Mail.php');
+ $from = "Invites <invites@pomf.se>";
+ $to = $email;
+ $subject = "Pomf.se Account Invite";
+ $body = "This is a automated message from Pomf.se \n Your invite code is: ".$code."\n Your invite email is: ".$email." \n Access level: ".$level." \n Register at http://cayootie.pomf.se/user/register";
+
+ $host = "xxx";
+ $username = "xxx";
+ $password = "xxx";
+
+ $headers = array(
+ 'From' => $from,
+ 'To' => $to,
+ 'Subject' => $subject
+ );
+
+ $smtp = Mail::factory(
+ 'smtp',
+ array(
+ 'host' => $host,
+ 'auth' => true,
+ 'username' => $username,
+ 'password' => $password
+ )
+ );
+
+ $mail = $smtp->send($to, $headers, $body);
+
+ if (PEAR::isError($mail)) {
+ echo("<p>" . $mail->getMessage() . "</p>");
+ } else {
+ echo("<p>Message successfully sent!</p>");
+ }
+ } else {
+ echo 'What are you doing here? Go away!';
+ }
}
function generateRandomString($length = 36) {
@@ -79,207 +96,217 @@ function generateRandomString($length = 36) {
for ($i = 0; $i < $length; $i++) {
$randomString .= $characters[rand(0, strlen($characters) - 1)];
}
+
return $randomString;
}
-function login ($email, $pass) {
- global $db;
- $do = $db->prepare("SELECT pass, id, email, level FROM accounts WHERE email = (:email)");
- $do->bindParam(':email', $email);
- $do->execute();
- $result = $do->fetch(PDO::FETCH_ASSOC);
-
- if (password_verify($pass, $result['pass'])) {
- $_SESSION['id'] = $result['id'];
- $_SESSION['email'] = $result['email'];
- $_SESSION['level'] = $result['level'];
- header('Location: api.php?do=cp');
- }else{
- header('Location: ../login/index.html#fail');
- }
+function login($email, $pass) {
+ global $db;
+
+ $do = $db->prepare("SELECT pass, id, email, level FROM accounts WHERE email = (:email)");
+ $do->bindParam(':email', $email);
+ $do->execute();
+ $result = $do->fetch(PDO::FETCH_ASSOC);
+
+ if (password_verify($pass, $result['pass'])) {
+ $_SESSION['id'] = $result['id'];
+ $_SESSION['email'] = $result['email'];
+ $_SESSION['level'] = $result['level'];
+ header('Location: api.php?do=cp');
+ } else {
+ header('Location: ../login/index.html#fail');
+ }
}
-function search ($word) {
- if(empty($word)) return;
- global $db;
- $str = "%".$word."%";
- $id = $_SESSION['id'];
- if($_SESSION['level'] === '1'){
- $do = $db->prepare("SELECT originalname, filename FROM files WHERE originalname LIKE (:1) OR filename LIKE (:2)");
- $do->bindParam(':1', $str);
- $do->bindParam(':2', $str);
- $do->execute();
-
- while ($row = $do->fetch(PDO::FETCH_ASSOC)) {
- print strip_tags($row['originalname']).' - '.'<a href="http://a.pomf.se/'.$row['filename'].'" target="_BLANK">'.$row['filename'].' </a> '.'<a href="http://cayootie.pomf.se/user/includes/api.php?do=delete&f='.$row['filename'].'" target="_BLANK"> Delete</a><br/>';
- }
-
- //Yes I love not being efficient, deal with it.
- }else{
- $do = $db->prepare("SELECT originalname, filename FROM files WHERE originalname LIKE (:1) AND user = (:3) OR filename LIKE (:2) AND user = (:3)");
- $do->bindParam(':1', $str);
- $do->bindParam(':2', $str);
- $do->bindParam(':3', $id);
- $do->execute();
-
- while ($row = $do->fetch(PDO::FETCH_ASSOC)) {
- print strip_tags($row['originalname']).' - '.'<a href="http://a.pomf.se/'.$row['filename'].'" target="_BLANK">'.$row['filename'].' </a> '.'<a href="http://cayootie.pomf.se/user/includes/api.php?do=delete&f='.$row['filename'].'" target="_BLANK"> Delete</a><br/>';
- }
+function search($word) {
+ if (empty($word)) {
+ return;
+ }
+
+ global $db;
+
+ $str = "%".$word."%";
+ $id = $_SESSION['id'];
+
+ if ($_SESSION['level'] === '1') {
+ $do = $db->prepare("SELECT originalname, filename FROM files WHERE originalname LIKE (:1) OR filename LIKE (:2)");
+ $do->bindParam(':1', $str);
+ $do->bindParam(':2', $str);
+ $do->execute();
+
+ while ($row = $do->fetch(PDO::FETCH_ASSOC)) {
+ print strip_tags($row['originalname']).' - '.'<a href="http://a.pomf.se/'.$row['filename'].'" target="_BLANK">'.$row['filename'].' </a> '.'<a href="http://cayootie.pomf.se/user/includes/api.php?do=delete&f='.$row['filename'].'" target="_BLANK"> Delete</a><br/>';
+ }
+ } else {
+ // Yes I love not being efficient, deal with it.
+ $do = $db->prepare("SELECT originalname, filename FROM files WHERE originalname LIKE (:1) AND user = (:3) OR filename LIKE (:2) AND user = (:3)");
+ $do->bindParam(':1', $str);
+ $do->bindParam(':2', $str);
+ $do->bindParam(':3', $id);
+ $do->execute();
+
+ while ($row = $do->fetch(PDO::FETCH_ASSOC)) {
+ print strip_tags($row['originalname']).' - '.'<a href="http://a.pomf.se/'.$row['filename'].'" target="_BLANK">'.$row['filename'].' </a> '.'<a href="http://cayootie.pomf.se/user/includes/api.php?do=delete&f='.$row['filename'].'" target="_BLANK"> Delete</a><br/>';
+ }
}
}
-function cfdelete ($file) {
-
- $butts = array(
- 'a' => 'zone_file_purge',
- 'tkn' => 'xxxx',
- 'email' => 'xxx',
- 'z' => 'pomf.se',
- 'url' => urlencode('http://a.pomf.se/'.$file),
- );
-
- foreach($butts as $dick=>$cum) { $butts_string .= $dick.'='.$cum.'&'; }
- rtrim($butts_string, '&');
-
- $hue = curl_init();
- curl_setopt($hue,CURLOPT_URL, 'https://www.cloudflare.com/api_json.html');
- curl_setopt($hue,CURLOPT_POST, count($butts));
- curl_setopt($hue,CURLOPT_POSTFIELDS, $butts_string);
- curl_setopt($hue,CURLOPT_RETURNTRANSFER, true);
- curl_exec($hue);
- curl_close($hue);
+function cfdelete($file) {
+ $butts = array(
+ 'a' => 'zone_file_purge',
+ 'tkn' => 'xxxx',
+ 'email' => 'xxx',
+ 'z' => 'pomf.se',
+ 'url' => urlencode('http://a.pomf.se/'.$file),
+ );
+
+ foreach ($butts as $dick=>$cum) {
+ $butts_string .= $dick.'='.$cum.'&';
+ }
+ rtrim($butts_string, '&');
+
+ $hue = curl_init();
+ curl_setopt($hue,CURLOPT_URL, 'https://www.cloudflare.com/api_json.html');
+ curl_setopt($hue,CURLOPT_POST, count($butts));
+ curl_setopt($hue,CURLOPT_POSTFIELDS, $butts_string);
+ curl_setopt($hue,CURLOPT_RETURNTRANSFER, true);
+ curl_exec($hue);
+ curl_close($hue);
+}
+
+function delete($filename, $deleteid, $mod) {
+ if (empty($filename)) {
+ echo "You did something wrong, baka.";
+ } else {
+ global $db;
+
+ $do = $db->prepare("SELECT filename, delid, id, user FROM files WHERE filename = (:filename)");
+ $do->bindParam(':filename', $filename);
+ $do->execute();
+ $result = $do->fetch(PDO::FETCH_ASSOC);
+
+ if ($_SESSION['level'] === '1' || $result['user'] === $_SESSION['id']) {
+ $do = $db->prepare("DELETE FROM files WHERE id = (:id)");
+ $do->bindParam(':id', $result['id']);
+ $do->execute();
+
+ unlink('/home/neku/pomf/files/'.$filename);
+ cfdelete($filename);
+
+ echo "<br/>File deleted and hopefully deleted from Cloudflares cache in a moment..<br/>";
+ } else {
+ echo 'Shame on you';
+ }
+ }
}
-function delete ($filename, $deleteid, $mod) {
- if(empty($filename)){
- echo "You did something wrong, baka.";
- }else{
- global $db;
- $do = $db->prepare("SELECT filename, delid, id, user FROM files WHERE filename = (:filename)");
- $do->bindParam(':filename', $filename);
- $do->execute();
- $result = $do->fetch(PDO::FETCH_ASSOC);
-
- if($_SESSION['level'] === '1' || $result['user'] === $_SESSION['id']){
- $do = $db->prepare("DELETE FROM files WHERE id = (:id)");
- $do->bindParam(':id', $result['id']);
- $do->execute();
- unlink('/home/neku/pomf/files/'.$filename);
- cfdelete($filename);
- echo "<br/>File deleted and hopefully deleted from Cloudflares cache in a moment..<br/>";
- }else{
- echo 'Shame on you';
- }//hue
- }//hue
- }//penis
-
- function mod ($action, $date, $count, $why, $file, $keyword, $fileid, $hash, $oginalname) {
- if($_SESSION['level'] > '0'){
- global $db;
- switch($action){
-
- case "fetch":
- if($_SESSION['level'] > '0'){
- $do = $db->prepare("SELECT * FROM files WHERE originalname LIKE (:keyword) AND date LIKE (:date) OR filename LIKE (:keyword) AND date LIKE (:date) ORDER BY id DESC LIMIT 0,:amount");
- }else{
- $do = $db->prepare("SELECT * FROM files WHERE originalname LIKE (:keyword) AND date LIKE (:date) AND user = (:userid) OR filename LIKE (:keyword) AND date LIKE (:date) AND user = (:userid) ORDER BY id$
- $do->bindValue(':userid', $_SESSION['id']);}
-
- $do->bindValue(':date', "%".$date."%");
- $do->bindValue(':amount', (int) $count, PDO::PARAM_INT);
- $do->bindValue(':keyword', "%".$keyword."%");
-
- $do->execute();
- $i = 0;
- echo'<!DOCTYPE html><html><head><title>Mod</title>
- <style>
- table,th,td{border:1px solid black; border-collapse:collapse;}
- th,td{padding:5px;}
- </style></head><body>
- <p>Keep in mind that this is a alpha version of the mod panel, click <a href="http://cayootie.pomf.se/user/includes/api.php?do=logout">here</a> to logout or <a href="http://cayootie.pomf.se/user/panel" target="_BLANK">here</a> to go to the panel for your personal account.</p>
- <form action="http://cayootie.pomf.se/user/includes/api.php" method="get">
- <input type="hidden" name="do" value="mod">
- <input type="hidden" name="action" value="fetch">
- Date: <input type="text" name="date" value="'.date('Y-m-d').'">
- Amount: <input type="text" name="count" value="30">
- Keyword: <input type="text" name="keyword">
- <input type="submit" value="fetch">
- </form><br>
- <table id="result" style="width:100%">
- <tr><th>ID</th><th>Orginal Name</th><th>Filename</th><th>Size (bytes)</th><th>Action</th></tr>';
- while ($row = $do->fetch(PDO::FETCH_ASSOC)) {
- $i++;
- echo '<tr><td>'.$row['id'].'</td>
- <td>'.strip_tags($row['originalname']).'</td>
- <td><a href="http://a.pomf.se/'.$row['filename'].'" target="_BLANK">'.$row['filename'].'</a> ('.$row['originalname'].')</td>
- <td>'.$row['size'].'</td>
- <td><a href="http://cayootie.pomf.se/user/includes/api.php?do=mod&action=remove&fileid='.$row['id'].'&file='.$row['filename'].'" target="_BLANK">Remove</a></td></tr>';
-
- }
- echo '</table></body></html>';
- echo $i.' Files in total at being shown.';
-
- break;
-
- case "report":
- $do = $db->prepare("INSERT INTO reports (hash, date, file, fileid, reporter) VALUES (:hash, :date, :file, :fileid, :reporter)");
- $do->bindValue(':file', strip_tags($file));
- $do->bindValue(':date', date('Y-m-d'));
- $do->bindValue(':reporter', $_SESSION['email']);
- $do->bindValue(':fileid', $fileid);
- $do->bindValue(':hash', $hash);
- $do->execute();
- echo 'Thank you, report has been sent. The file will be reviewed and probably deleted.';
- break;
-
- case "reports":
- if($_SESSION['id'] === '1'){
- $do = $db->prepare("SELECT * FROM reports WHERE status = '0'");
- $do->execute();
-
- $i = 0;
- echo'<!DOCTYPE html><html><head><title>Mod</title>
- <style>
- table,th,td{border:1px solid black; border-collapse:collapse;}
- th,td{padding:5px;}
- </style></head><body>
- <p> Status 0 = not removed</p>
- <p> Status 1 = removed (not shown)</p>
- <table id="result" style="width:100%">
- <tr><th>ID</th><th>File</th><th>File ID</th><th>Reporter</th><th>Status</th><th>Action</th></tr>';
- while ($row = $do->fetch(PDO::FETCH_ASSOC)) {
- $i++;
- echo '<tr><td>'.$row['id'].'</td>
- <td><a href="http://a.pomf.se/'.strip_tags($row['file']).'" target="_BLANK">'.strip_tags($row['file']).'</td>
- <td>'.$row['fileid'].'</td>
- <td>'.$row['reporter'].'</td>
- <td>'.$row['status'].'</td>
- <td><a href="http://cayootie.pomf.se/user/includes/api.php?do=mod&action=remove&fileid='.$row['fileid'].'&file='.$row['file'].'" target="_BLANK">Remove file</a></td></tr>';
-
- }
- echo '</table></body></html>';
- echo $i.' Reports in total at being shown.';
- }else{
- echo 'You are not allowed to be here, yet.';
- }
- break;
-
- case "remove":
- if($_SESSION['id'] < '0'){
- delete($file, $fileid);}
- if($_SESSION['id'] > '0'){
- $do = $db->prepare("DELETE FROM files WHERE id = (:id)");
- $do->bindParam(':id', $fileid);
- $do->execute();
- unlink('/home/neku/pomf/files/'.$file);
- cfdelete($file);
- $do = $db->prepare("UPDATE reports SET status = (:status) WHERE fileid = (:fileid)");
- $do->bindValue(':status', '1');
- $do->bindValue(':fileid', $fileid);
- $do->execute();
- echo 'Deleted';
- break;
- }
- }
- }
+function mod($action, $date, $count, $why, $file, $keyword, $fileid, $hash, $oginalname) {
+ if ($_SESSION['level'] > '0') {
+ global $db;
+
+ switch ($action) {
+ case "fetch":
+ if ($_SESSION['level'] > '0') {
+ $do = $db->prepare("SELECT * FROM files WHERE originalname LIKE (:keyword) AND date LIKE (:date) OR filename LIKE (:keyword) AND date LIKE (:date) ORDER BY id DESC LIMIT 0,:amount");
+ } else {
+ $do = $db->prepare("SELECT * FROM files WHERE originalname LIKE (:keyword) AND date LIKE (:date) AND user = (:userid) OR filename LIKE (:keyword) AND date LIKE (:date) AND user = (:userid) ORDER BY id$
+ $do->bindValue(':userid', $_SESSION['id']);
+ }
+ $do->bindValue(':date', "%".$date."%");
+ $do->bindValue(':amount', (int) $count, PDO::PARAM_INT);
+ $do->bindValue(':keyword', "%".$keyword."%");
+ $do->execute();
+
+ echo '<!DOCTYPE html><html><head><title>Mod</title>
+ <style>
+ table,th,td{border:1px solid black; border-collapse:collapse;}
+ th,td{padding:5px;}
+ </style></head><body>
+ <p>Keep in mind that this is a alpha version of the mod panel, click <a href="http://cayootie.pomf.se/user/includes/api.php?do=logout">here</a> to logout or <a href="http://cayootie.pomf.se/user/panel" target="_BLANK">here</a> to go to the panel for your personal account.</p>
+ <form action="http://cayootie.pomf.se/user/includes/api.php" method="get">
+ <input type="hidden" name="do" value="mod">
+ <input type="hidden" name="action" value="fetch">
+ Date: <input type="text" name="date" value="'.date('Y-m-d').'">
+ Amount: <input type="text" name="count" value="30">
+ Keyword: <input type="text" name="keyword">
+ <input type="submit" value="fetch">
+ </form><br>
+ <table id="result" style="width:100%">
+ <tr><th>ID</th><th>Orginal Name</th><th>Filename</th><th>Size (bytes)</th><th>Action</th></tr>';
+
+ $i = 0;
+ while ($row = $do->fetch(PDO::FETCH_ASSOC)) {
+ $i++;
+ echo '<tr><td>'.$row['id'].'</td>
+ <td>'.strip_tags($row['originalname']).'</td>
+ <td><a href="http://a.pomf.se/'.$row['filename'].'" target="_BLANK">'.$row['filename'].'</a> ('.$row['originalname'].')</td>
+ <td>'.$row['size'].'</td>
+ <td><a href="http://cayootie.pomf.se/user/includes/api.php?do=mod&action=remove&fileid='.$row['id'].'&file='.$row['filename'].'" target="_BLANK">Remove</a></td></tr>';
+ }
+ echo '</table></body></html>';
+ echo $i.' Files in total at being shown.';
+ break;
+ case "report":
+ $do = $db->prepare("INSERT INTO reports (hash, date, file, fileid, reporter) VALUES (:hash, :date, :file, :fileid, :reporter)");
+ $do->bindValue(':file', strip_tags($file));
+ $do->bindValue(':date', date('Y-m-d'));
+ $do->bindValue(':reporter', $_SESSION['email']);
+ $do->bindValue(':fileid', $fileid);
+ $do->bindValue(':hash', $hash);
+ $do->execute();
+
+ echo 'Thank you, report has been sent. The file will be reviewed and probably deleted.';
+ break;
+ case "reports":
+ if ($_SESSION['id'] === '1') {
+ $do = $db->prepare("SELECT * FROM reports WHERE status = '0'");
+ $do->execute();
+ $i = 0;
+ echo '<!DOCTYPE html><html><head><title>Mod</title>
+ <style>
+ table,th,td{border:1px solid black; border-collapse:collapse;}
+ th,td{padding:5px;}
+ </style></head><body>
+ <p> Status 0 = not removed</p>
+ <p> Status 1 = removed (not shown)</p>
+ <table id="result" style="width:100%">
+ <tr><th>ID</th><th>File</th><th>File ID</th><th>Reporter</th><th>Status</th><th>Action</th></tr>';
+ while ($row = $do->fetch(PDO::FETCH_ASSOC)) {
+ $i++;
+ echo '<tr><td>'.$row['id'].'</td>
+ <td><a href="http://a.pomf.se/'.strip_tags($row['file']).'" target="_BLANK">'.strip_tags($row['file']).'</td>
+ <td>'.$row['fileid'].'</td>
+ <td>'.$row['reporter'].'</td>
+ <td>'.$row['status'].'</td>
+ <td><a href="http://cayootie.pomf.se/user/includes/api.php?do=mod&action=remove&fileid='.$row['fileid'].'&file='.$row['file'].'" target="_BLANK">Remove file</a></td></tr>';
+ }
+ echo '</table></body></html>';
+ echo $i.' Reports in total at being shown.';
+ } else {
+ echo 'You are not allowed to be here, yet.';
+ }
+ break;
+ case "remove":
+ if ($_SESSION['id'] < '0') {
+ delete($file, $fileid);
+ }
+ if ($_SESSION['id'] > '0') {
+ $do = $db->prepare("DELETE FROM files WHERE id = (:id)");
+ $do->bindParam(':id', $fileid);
+ $do->execute();
+
+ unlink('/home/neku/pomf/files/'.$file);
+ cfdelete($file);
+
+ $do = $db->prepare("UPDATE reports SET status = (:status) WHERE fileid = (:fileid)");
+ $do->bindValue(':status', '1');
+ $do->bindValue(':fileid', $fileid);
+ $do->execute();
+
+ echo 'Deleted';
+ break;
+ }
+ }
+ }
+}
?>