admin.php 5.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191
  1. <!DOCTYPE html>
  2. <html>
  3. <head>
  4. <title>Blacklister Admin</title>
  5. </head>
  6. <body>
  7. <div>
  8. <?php
  9. error_reporting(E_ALL);
  10. require_once 'action.php';
  11. require_once 'db.php';
  12. require_once 'token.php';
  13. require_once 'stats.php';
  14. if(!isset($_GET['token'])){
  15. echo "<form action='admin.php'><input type='text' id='token' name='token'><input type='submit' valeu='send token'></form></div></body></html>";
  16. exit;
  17. }
  18. if(isset($_GET['ip'])) {
  19. $ip = ip2long(substr(trim($_GET['ip']),0,15));
  20. }
  21. if(isset($_GET['token'])) {
  22. $token = substr(trim($_GET['token']),0,25);
  23. }
  24. if(isset($_GET['action'])) {
  25. $action = substr(trim($_GET['action']),0,12);
  26. }
  27. if(isset($_GET['userid'])) {
  28. $userid = substr(trim($_GET['id']),0,25);
  29. }
  30. if(isset($_GET['role'])) {
  31. $role = substr(trim($_GET['role']),0,8);
  32. }
  33. if(isset($_GET['description'])) {
  34. $description = substr(trim($_GET['description']),0,25);
  35. }
  36. $stats = true;
  37. if (!(new token)->isAdmin($token)) {
  38. echo "admin access denied</div></body></html>";
  39. exit;
  40. }
  41. if($stats == true) {
  42. (new stats)->log($ip,$action,$token);
  43. }
  44. switch($action) {
  45. case 'deluser':
  46. if((new action)->delUser($id)){
  47. echo " user removed " . $id ."\n";
  48. } else {
  49. echo " fehler\n";
  50. };
  51. break;
  52. case 'adduser':
  53. if((new action)->addUser($id,$role,$description)){
  54. echo " user added " . $id . " role " . "\n";
  55. } else {
  56. echo " fehler\n";
  57. };
  58. break;
  59. case 'blacklist':
  60. if((new action)->blackList($ip)){
  61. echo " blacklisted " . long2ip($ip) ."\n";
  62. } else {
  63. echo " fehler\n";
  64. };
  65. break;
  66. case 'deblacklist':
  67. if((new action)->deBlackList($ip)){
  68. echo " deblacklisted " . long2ip($ip) ."\n";
  69. } else {
  70. echo " fehler\n";
  71. };
  72. break;
  73. case 'whitelist':
  74. if((new action)->whiteList($ip)){
  75. echo " whitelisted " . long2ip($ip) ."\n";
  76. } else {
  77. echo " fehler\n";
  78. };
  79. break;
  80. case 'dewhitelist':
  81. if((new action)->deWhiteList($ip)){
  82. echo " dewhitelisted " . long2ip($ip) ."\n";
  83. } else {
  84. echo " fehler\n";
  85. };
  86. break;
  87. case 'list':
  88. if((new action)->list($ip)){
  89. echo " listed " . long2ip($ip) ."\n";
  90. } else {
  91. echo " fehler\n";
  92. };
  93. break;
  94. case 'delist':
  95. if((new action)->adminDeList($ip)){
  96. echo " delisted " . long2ip($ip) ."\n";
  97. } else {
  98. echo " fehler\n";
  99. };
  100. break;
  101. }
  102. ?>
  103. </div>
  104. <h3>Clients</h3>
  105. <table>
  106. <tr><th>Token</th><th>Role</th><th>Description</th><th></th></tr>
  107. <?php
  108. $userlist = (new action)->getUser();
  109. foreach($userlist as $user) {
  110. echo "<tr><td>" . $user[0] . "</td><td>" . $user[1] . "</td><td>" . $user[2] . "</td><td><a href=admin.php?token=" . $token . "&action=deluser&id=" . $user[0] . ">remove user</a></td></tr>";
  111. }
  112. ?>
  113. <tr>
  114. <form action="admin.php">
  115. <input type="hidden" id="token" name="token" value="<?php echo $token; ?>">
  116. <input type="hidden" id="action" name="action" value="adduser">
  117. <td>
  118. <input type='text' id='userid' name='userid'>
  119. </td><td>
  120. <input type='radio' id='reporter' name='role' value='Reporter'>Reporter
  121. <input type='radio' id='consumer' name='role' value='Consumer'>Consumer
  122. <input type='radio' id='admin' name='role' value='Admin'>Admin
  123. </td><td>
  124. <input type='text' id='description' name='description'>
  125. </td><td>
  126. <input type='submit' value='add user'>
  127. </td></form>
  128. </tr>
  129. </table>
  130. <h3>Blacklist</h3>
  131. <table>
  132. <?php
  133. $blacklist = (new action)->getBlackList();
  134. foreach($blacklist as $blip) {
  135. echo "<tr><td>" . long2ip($blip) . "</td><td><a href=admin.php?token=" . $token . "&action=deblacklist&ip=" . long2ip($blip) . ">remove from blacklist</a></td></tr>";
  136. }
  137. ?>
  138. <tr>
  139. <form action="admin.php">
  140. <input type="hidden" id="token" name="token" value="<?php echo $token; ?>">
  141. <input type="hidden" id="action" name="action" value="blacklist">
  142. <td>
  143. <input type='text' id='ip' name='ip'>
  144. </td><td>
  145. <input type='submit' value='add to blacklist'>
  146. </form>
  147. </td></tr>
  148. </table>
  149. <h3>Whitelist</h3>
  150. <table border="0">
  151. <?php
  152. $whitelist = (new action)->getWhiteList();
  153. foreach($whitelist as $wlip) {
  154. echo "<tr><td>" . long2ip($wlip) . "</td><td><a href=admin.php?token=" . $token . "&action=dewhitelist&ip=" . long2ip($wlip) . ">remove from whitelist</a></td></tr>";
  155. }
  156. ?>
  157. <tr>
  158. <form action="admin.php">
  159. <input type="hidden" id="token" name="token" value="<?php echo $token; ?>">
  160. <input type="hidden" id="action" name="action" value="whitelist">
  161. <td>
  162. <input type='text' id='ip' name='ip'>
  163. </td><td>
  164. <input type='submit' value='add to whitelist'>
  165. </form>
  166. </td></tr>
  167. </table>
  168. <h3>List</h3>
  169. <table border="0">
  170. <?php
  171. $list = (new action)->getList();
  172. foreach($list as $lip) {
  173. echo "<tr><td>" . long2ip($lip) . "</td><td><a href=admin.php?token=" . $token . "&action=delist&ip=" . long2ip($lip) . ">remove from list</a></td></tr>";
  174. }
  175. ?>
  176. <tr>
  177. <form action="admin.php">
  178. <input type="hidden" id="token" name="token" value="<?php echo $token; ?>">
  179. <input type="hidden" id="action" name="action" value="list">
  180. <td>
  181. <input type='text' id='ip' name='ip'>
  182. </td><td>
  183. <input type='submit' value='add to list'>
  184. </form>
  185. </td></tr>
  186. </table>
  187. </body>
  188. </html>