Default page

Your IP: 216.73.216.124
Server IP: 50.28.103.30
Server: Linux host.jcukjv-lwsites.com 4.18.0-553.22.1.el8_10.x86_64 #1 SMP Tue Sep 24 05:16:59 EDT 2024 x86_64
Server Software: nginx/1.28.0
PHP Version: 8.3.12
Buat File | Buat Folder

Dir : ~/www/wwwroot/china-democracyparty.com/2/admin/

Edit File: pages.php

<?php
require_once __DIR__ . '/../includes/auth.php';
require_once __DIR__ . '/../config/sql.php';
require_once __DIR__ . '/../includes/functions.php';
check_csrf();

if($_SERVER['REQUEST_METHOD']==='POST'){
    $id = intval($_POST['id'] ?? 0);
    $title = trim($_POST['title'] ?? '');
    $slug  = trim($_POST['slug'] ?? '');
    $content = $_POST['content'] ?? '';

if($id>0){
        $stmt = $conn->prepare("UPDATE pages SET title=?, slug=?, content=? WHERE id=?");
        $stmt->bind_param("sssi", $title, $slug, $content, $id);
        $stmt->execute(); $stmt->close();
    } else {
        $stmt = $conn->prepare("INSERT INTO pages(title, slug, content) VALUES(?,?,?)");
        $stmt->bind_param("sss", $title, $slug, $content);
        $stmt->execute(); $stmt->close();
    }
    header("Location: /admin/pages.php"); exit;
}

if(isset($_GET['delete'])){
    $id = intval($_GET['delete']);
    $conn->query("DELETE FROM pages WHERE id={$id}");
    header("Location: /admin/pages.php"); exit;
}

$edit = null;
if(isset($_GET['id'])){
    $id = intval($_GET['id']);
    $res = $conn->query("SELECT * FROM pages WHERE id={$id} LIMIT 1");
    $edit = $res->fetch_assoc();
}
$pages = $conn->query("SELECT id,title,slug FROM pages ORDER BY id DESC");
$page_title = '管理页面';
include __DIR__ . '/../includes/header.php';
?>
<div class="row g-4">
  <div class="col-lg-7">
    <h1 class="h4">页面列表</h1>
    <table class="table table-sm align-middle">
      <thead><tr><th>ID</th><th>标题</th><th>Slug</th><th>操作</th></tr></thead>
      <tbody>
        <?php while($row = $pages->fetch_assoc()): ?>
          <tr>
            <td><?php echo (int)$row['id']; ?></td>
            <td><?php echo h($row['title']); ?></td>
            <td><?php echo h($row['slug']); ?></td>
            <td>
              <a class="btn btn-sm btn-outline-primary" href="/admin/pages.php?id=<?php echo (int)$row['id']; ?>">编辑</a>
              <a class="btn btn-sm btn-outline-danger" href="/admin/pages.php?delete=<?php echo (int)$row['id']; ?>" onclick="return confirm('确认删除？')">删除</a>
            </td>
          </tr>
        <?php endwhile; ?>
      </tbody>
    </table>
  </div>
  <div class="col-lg-5">
    <h1 class="h4"><?php echo $edit ? '编辑页面' : '新建页面'; ?></h1>
    <form method="post">
      <input type="hidden" name="csrf" value="<?php echo h(csrf_token()); ?>">
      <input type="hidden" name="id" value="<?php echo (int)($edit['id'] ?? 0); ?>">
      <div class="mb-2">
        <label class="form-label">标题</label>
        <input name="title" class="form-control" required value="<?php echo h($edit['title'] ?? ''); ?>">
      </div>
      <div class="mb-2">
        <label class="form-label">Slug（URL）</label>
        <input name="slug" class="form-control" placeholder="about / charter / join" required value="<?php echo h($edit['slug'] ?? ''); ?>">
      </div>
      <div class="mb-2">
        <label class="form-label">内容（支持 HTML）</label>
        <textarea name="content" class="form-control" rows="10"><?php echo h($edit['content'] ?? ''); ?>