Added warning to logged in user without admin permissions trying to view admin options

This commit is contained in:
Taylor Courage 2025-03-01 16:26:23 -05:00
parent 374197cdf5
commit 1364e665bc
5 changed files with 41 additions and 44 deletions

View File

@ -60,14 +60,18 @@ session_start();
} else if (isset($_SESSION["userID"]) && $_SESSION["isAdmin"] == 1) {
echo "<iframe src=\"admin_nav.php\" name=\"dataFrame\" class=\"dataFrame\" id=\"dataFrame\" onload=\"resizeIframe(this);\"></iframe>";
} else {
echo "<iframe src=\"error.php\" name=\"dataFrame\" class=\"dataFrame\" id=\"dataFrame\" onload=\"resizeIframe(this);\"></iframe>";
echo "<iframe src=\"not_admin.php\" name=\"dataFrame\" class=\"dataFrame\" id=\"dataFrame\" onload=\"resizeIframe(this);\"></iframe>";
}
}
?>
<div id="subNav">
<a href="./" class="navLink" id="adminHomeButton">ADMIN HOME</a>
<?php
if (isset($_SESSION["isAdmin"]) && $_SESSION["isAdmin"] == 1) {
echo "<a href=\"./\" class=\"navLink\" id=\"adminHomeButton\">ADMIN HOME</a>";
}
?>
<a href="../" class="navLink" id="mainHomeButton">MAIN HOME</a>
<p class="newLine"></p>
<?php

25
admin/not_admin.php Normal file
View File

@ -0,0 +1,25 @@
<?php
session_start();
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no" />
<link rel="stylesheet" href="../styles/primary.css" />
<link rel="stylesheet" href="../styles/admin.css" />
<link rel="stylesheet" href="../styles/admin_nav.css" />
<script src="../scripts/trojan.js"></script>
<title>NOT AN ADMIN</title>
</head>
<body id="notAnAdmin">
<h3>You're not allowed to be here!</h3>
<p>You don't have the necessary privileges to view this content</p>
<p>If you believe this to be an error, contact another admin, or your systems administrator.</p>
</body>
</html>

View File

@ -36,34 +36,24 @@
$isAdmin = 1;
}
echo "<br>";
echo $username . "<br>";
echo $password . "<br>";
echo $discord . "<br>";
echo $twitch . "<br>";
echo $youtube . "<br>";
echo $isAdmin . "<br>";
echo "lock 0";
$insert = $conn->prepare("INSERT INTO " . $userTableName . " (username, password, discord, twitch, youtube, isAdmin) VALUES (:username, :password, :discord, :twitch, :youtube, :isAdmin)");
echo "lock 1";
$insert->bindParam(":username", $username);
$insert->bindParam(":password", $password);
$insert->bindParam(":discord", $discord);
$insert->bindParam(":twitch", $twitch);
$insert->bindParam(":youtube", $youtube);
echo "lock 2";
$insert->bindParam(":isAdmin", $isAdmin);
echo "lock 3";
$insert->execute();
echo "New records created successfully?";
if ($isAdmin == 1) {
echo "New admin user \"" . $username . "\" created successfully";
} else {
echo "New user \"" . $username . "\" created successfully";
}

View File

@ -1,27 +0,0 @@
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no" />
<link rel="stylesheet" href="styles/primary.css" />
<script src="scripts/trojan.js"></script>
<title>Trojan's Trophy Room</title>
</head>
<body id="body">
<div id="contentFrame">
<h1>Trojan's Trophy Room</h1>
<h3>Choose a division to see results!</h3>
<div id="navPanel">
<a href="open.html" target="dataFrame" class="navLink">OPEN</a>
<a href="intermediate.html" target="dataFrame" class="navLink">INTERMEDIATE</a>
<a href="main.html" target="dataFrame" class="navLink">MAIN</a>
<p class="newLine"></p>
<a href="general.html" target="dataFrame" class="navLink">GENERAL (HOME)</a>
</div>
<p>&nbsp;</p>
<iframe src="open.html" name="dataFrame" class="dataFrame" id="dataFrame" onload="resizeIframe(this);"></iframe>
</div>
</body>
</html>

View File

@ -41,3 +41,8 @@
box-shadow: 0px 0px 2px;
transform: translateY(2px);
}
#notAnAdmin {
width: 300px;
font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
}