Taylor/trojans-trophy-room
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added warning to logged in user without admin permissions trying to view admin options

Browse Source
This commit is contained in:
Taylor Courage 2025-03-01 16:26:23 -05:00
parent 374197cdf5
commit 1364e665bc
5 changed files with 41 additions and 44 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
admin/index.php
View File

@ -60,14 +60,18 @@ session_start();
} else if (isset($_SESSION["userID"]) && $_SESSION["isAdmin"] == 1) { } else if (isset($_SESSION["userID"]) && $_SESSION["isAdmin"] == 1) {
echo "<iframe src=\"admin_nav.php\" name=\"dataFrame\" class=\"dataFrame\" id=\"dataFrame\" onload=\"resizeIframe(this);\"></iframe>"; echo "<iframe src=\"admin_nav.php\" name=\"dataFrame\" class=\"dataFrame\" id=\"dataFrame\" onload=\"resizeIframe(this);\"></iframe>";
} else { } else {
echo "<iframe src=\"error.php\" name=\"dataFrame\" class=\"dataFrame\" id=\"dataFrame\" onload=\"resizeIframe(this);\"></iframe>"; echo "<iframe src=\"not_admin.php\" name=\"dataFrame\" class=\"dataFrame\" id=\"dataFrame\" onload=\"resizeIframe(this);\"></iframe>";
} }
} }
?> ?>
<div id="subNav"> <div id="subNav">
<a href="./" class="navLink" id="adminHomeButton">ADMIN HOME</a> <?php
if (isset($_SESSION["isAdmin"]) && $_SESSION["isAdmin"] == 1) {
echo "<a href=\"./\" class=\"navLink\" id=\"adminHomeButton\">ADMIN HOME</a>";
}
?>
<a href="../" class="navLink" id="mainHomeButton">MAIN HOME</a> <a href="../" class="navLink" id="mainHomeButton">MAIN HOME</a>
<p class="newLine"></p> <p class="newLine"></p>
<?php <?php

25
admin/not_admin.php Normal file
View File

@ -0,0 +1,25 @@
<?php
session_start();
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no" />
<link rel="stylesheet" href="../styles/primary.css" />
<link rel="stylesheet" href="../styles/admin.css" />
<link rel="stylesheet" href="../styles/admin_nav.css" />
<script src="../scripts/trojan.js"></script>
<title>NOT AN ADMIN</title>
</head>
<body id="notAnAdmin">
<h3>You're not allowed to be here!</h3>
<p>You don't have the necessary privileges to view this content</p>
<p>If you believe this to be an error, contact another admin, or your systems administrator.</p>
</body>
</html>

20
admin/user_management/add_user.php
View File

@ -36,34 +36,24 @@
$isAdmin = 1; $isAdmin = 1;
} }
echo "<br>";
echo $username . "<br>";
echo $password . "<br>";
echo $discord . "<br>";
echo $twitch . "<br>";
echo $youtube . "<br>";
echo $isAdmin . "<br>";
echo "lock 0";
$insert = $conn->prepare("INSERT INTO " . $userTableName . " (username, password, discord, twitch, youtube, isAdmin) VALUES (:username, :password, :discord, :twitch, :youtube, :isAdmin)"); $insert = $conn->prepare("INSERT INTO " . $userTableName . " (username, password, discord, twitch, youtube, isAdmin) VALUES (:username, :password, :discord, :twitch, :youtube, :isAdmin)");
echo "lock 1";
$insert->bindParam(":username", $username); $insert->bindParam(":username", $username);
$insert->bindParam(":password", $password); $insert->bindParam(":password", $password);
$insert->bindParam(":discord", $discord); $insert->bindParam(":discord", $discord);
$insert->bindParam(":twitch", $twitch); $insert->bindParam(":twitch", $twitch);
$insert->bindParam(":youtube", $youtube); $insert->bindParam(":youtube", $youtube);
echo "lock 2";
$insert->bindParam(":isAdmin", $isAdmin); $insert->bindParam(":isAdmin", $isAdmin);
echo "lock 3";
$insert->execute(); $insert->execute();
echo "New records created successfully?"; if ($isAdmin == 1) {
echo "New admin user \"" . $username . "\" created successfully";
} else {
echo "New user \"" . $username . "\" created successfully";
}

27
index.html
View File

@ -1,27 +0,0 @@
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no" />
<link rel="stylesheet" href="styles/primary.css" />
<script src="scripts/trojan.js"></script>
<title>Trojan's Trophy Room</title>
</head>
<body id="body">
<div id="contentFrame">
<h1>Trojan's Trophy Room</h1>
<h3>Choose a division to see results!</h3>
<div id="navPanel">
<a href="open.html" target="dataFrame" class="navLink">OPEN</a>
<a href="intermediate.html" target="dataFrame" class="navLink">INTERMEDIATE</a>
<a href="main.html" target="dataFrame" class="navLink">MAIN</a>
<p class="newLine"></p>
<a href="general.html" target="dataFrame" class="navLink">GENERAL (HOME)</a>
</div>
<p>&nbsp;</p>
<iframe src="open.html" name="dataFrame" class="dataFrame" id="dataFrame" onload="resizeIframe(this);"></iframe>
</div>
</body>
</html>

5
styles/admin.css
View File

@ -41,3 +41,8 @@
box-shadow: 0px 0px 2px; box-shadow: 0px 0px 2px;
transform: translateY(2px); transform: translateY(2px);
} }
#notAnAdmin {
width: 300px;
font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
}