mmainstreet /
jodel-web
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | include 'php/jodel-web.php'; |
||
| 4 | |||
| 5 | |||
| 6 | if(isset($_GET['pw'])) |
||
| 7 | { |
||
| 8 | setcookie('JodelAdminPassword', $_GET['pw'], time()+60*60*24*365*10); |
||
| 9 | error_log('admin password saved for [' . $_SERVER ['HTTP_USER_AGENT'] . ']'); |
||
| 10 | header('Location: ' . $baseUrl . 'admin.php'); |
||
| 11 | exit; |
||
| 12 | } |
||
| 13 | else if(isset($_GET['voterPw'])) |
||
| 14 | { |
||
| 15 | setcookie('JodelVoterPassword', $_GET['voterPw'], time()+60*60*24*365*10); |
||
| 16 | error_log('voter password saved for [' . $_SERVER ['HTTP_USER_AGENT'] . ']'); |
||
| 17 | header('Location: ' . $baseUrl . 'admin.php'); |
||
| 18 | exit; |
||
| 19 | } |
||
| 20 | |||
| 21 | if(isUserAdmin()) |
||
| 22 | { |
||
| 23 | $userIsAdmin = true; |
||
| 24 | $userIsVoter = true; |
||
| 25 | } |
||
| 26 | else if(isUserVoter()) |
||
| 27 | { |
||
| 28 | $userIsAdmin = false; |
||
| 29 | $userIsVoter = true; |
||
| 30 | } |
||
| 31 | else |
||
| 32 | { |
||
| 33 | error_log($_SERVER['REMOTE_ADDR'] . ' used a wrong voterPw / pw on admin.php'); |
||
| 34 | die(); |
||
| 35 | } |
||
| 36 | |||
| 37 | |||
| 38 | if($userIsAdmin && isset($_POST['createAccount']) && $_POST['createAccount']) |
||
| 39 | { |
||
| 40 | $newJodelAccount = new JodelAccount(); |
||
| 41 | } |
||
| 42 | |||
| 43 | if($userIsAdmin && isset($_POST['createVoter']) && $_POST['createVoter']) |
||
| 44 | { |
||
| 45 | //insert voter into db |
||
| 46 | $db = new DatabaseConnect(); |
||
| 47 | $result = $db->query("INSERT INTO users (user_token, remaining_votes, device_uid, rights) |
||
| 48 | VALUES ('" . $db->escape_string($_POST['user_token']) |
||
| 49 | . "','" . $db->escape_string($_POST['remaining_votes']) |
||
| 50 | . "','" . $db->escape_string($_POST['device_uid']) |
||
| 51 | . "','" . $db->escape_string($_POST['rights']) . "')"); |
||
| 52 | |||
| 53 | View Code Duplication | if($result === false){ |
|
| 54 | $error = db_error(); |
||
| 55 | error_log($error); |
||
| 56 | error_log("Adding Voter failed: (" . $result->errno . ") " . $result->error); |
||
| 57 | } |
||
| 58 | } |
||
| 59 | |||
| 60 | //Vote |
||
| 61 | /* |
||
| 62 | if($userIsVoter && isset($_POST['vote']) && isset($_POST['postId']) && isset($_POST['quantity'])) |
||
| 63 | { |
||
| 64 | $i = 0; |
||
| 65 | $result = $db->query("SELECT access_token, device_uid FROM accounts WHERE device_uid NOT IN (SELECT device_uid FROM votes WHERE postId = '" . $_POST['postId'] . "')"); |
||
| 66 | |||
| 67 | if($result->num_rows > 0) |
||
| 68 | { |
||
| 69 | // output data of each row |
||
| 70 | while(($row = $result->fetch_assoc()) && $i < $_POST['quantity']) |
||
| 71 | { |
||
| 72 | $jodelAccount = new JodelAccount($row['device_uid']); |
||
| 73 | |||
| 74 | if($jodelAccount->votePostId($_POST['postId'], $_POST['vote'])) |
||
| 75 | { |
||
| 76 | $i++; |
||
| 77 | } |
||
| 78 | } |
||
| 79 | } |
||
| 80 | else |
||
| 81 | { |
||
| 82 | error_log("Error: 0 results"); |
||
| 83 | } |
||
| 84 | } |
||
| 85 | */ |
||
| 86 | |||
| 87 | ?> |
||
| 88 | <!DOCTYPE html> |
||
| 89 | <html lang="en"> |
||
| 90 | <head> |
||
| 91 | <title>Backend - JodelBlue WebClient</title> |
||
| 92 | |||
| 93 | <meta charset="utf8"> |
||
| 94 | <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> |
||
| 95 | <meta http-equiv="x-ua-compatible" content="ie=edge"> |
||
| 96 | |||
| 97 | <meta name="description" content="JodelBlue is a WebClient for the Jodel App. No registration required! Browse Jodels all over the world. Send your own Jodels or upvote others."> |
||
| 98 | <meta name="keywords" content="jodelblue, jodel, blue, webclient, web, client"> |
||
| 99 | |||
| 100 | <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.5/css/bootstrap.min.css" integrity="sha384-AysaV+vQoT3kOAXZkl02PThvDr8HYKPZhNT5h/CXfBThSRXQ6jW5DO2ekP5ViFdi" crossorigin="anonymous"> |
||
| 101 | <link rel="stylesheet" href="<?php echo $baseUrl;?>css/font-awesome.min.css"> |
||
| 102 | <link rel="stylesheet" href="<?php echo $baseUrl;?>style.css" type="text/css"> |
||
| 103 | |||
| 104 | <link rel="shortcut icon" type="image/x-icon" href="<?php echo $baseUrl;?>img/favicon/favicon.ico"> |
||
| 105 | <link rel="icon" type="image/x-icon" href="<?php echo $baseUrl;?>img/favicon/favicon.ico"> |
||
| 106 | <link rel="icon" type="image/gif" href="<?php echo $baseUrl;?>img/favicon/favicon.gif"> |
||
| 107 | <link rel="icon" type="image/png" href="<?php echo $baseUrl;?>img/favicon/favicon.png"> |
||
| 108 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon.png"> |
||
| 109 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-57x57.png" sizes="57x57"> |
||
| 110 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-60x60.png" sizes="60x60"> |
||
| 111 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-72x72.png" sizes="72x72"> |
||
| 112 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-76x76.png" sizes="76x76"> |
||
| 113 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-114x114.png" sizes="114x114"> |
||
| 114 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-120x120.png" sizes="120x120"> |
||
| 115 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-128x128.png" sizes="128x128"> |
||
| 116 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-144x144.png" sizes="144x144"> |
||
| 117 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-152x152.png" sizes="152x152"> |
||
| 118 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-180x180.png" sizes="180x180"> |
||
| 119 | <link rel="apple-touch-icon" href="<?php echo $baseUrl;?>img/favicon/apple-touch-icon-precomposed.png"> |
||
| 120 | <link rel="icon" type="image/png" href="<?php echo $baseUrl;?>img/favicon/favicon-16x16.png" sizes="16x16"> |
||
| 121 | <link rel="icon" type="image/png" href="<?php echo $baseUrl;?>img/favicon/favicon-32x32.png" sizes="32x32"> |
||
| 122 | <link rel="icon" type="image/png" href="<?php echo $baseUrl;?>img/favicon/favicon-96x96.png" sizes="96x96"> |
||
| 123 | <link rel="icon" type="image/png" href="<?php echo $baseUrl;?>img/favicon/favicon-160x160.png" sizes="160x160"> |
||
| 124 | <link rel="icon" type="image/png" href="<?php echo $baseUrl;?>img/favicon/favicon-192x192.png" sizes="192x192"> |
||
| 125 | <link rel="icon" type="image/png" href="<?php echo $baseUrl;?>img/favicon/favicon-196x196.png" sizes="196x196"> |
||
| 126 | <meta name="msapplication-TileImage" content="<?php echo $baseUrl;?>img/favicon/win8-tile-144x144.png"> |
||
| 127 | <meta name="msapplication-TileColor" content="#5682a3"> |
||
| 128 | <meta name="msapplication-navbutton-color" content="#5682a3"> |
||
| 129 | <meta name="application-name" content="JodelBlue"/> |
||
| 130 | <meta name="msapplication-tooltip" content="JodelBlue"/> |
||
| 131 | <meta name="apple-mobile-web-app-title" content="JodelBlue"/> |
||
| 132 | <meta name="msapplication-square70x70logo" content="<?php echo $baseUrl;?>img/favicon/win8-tile-70x70.png"> |
||
| 133 | <meta name="msapplication-square144x144logo" content="<?php echo $baseUrl;?>img/favicon/win8-tile-144x144.png"> |
||
| 134 | <meta name="msapplication-square150x150logo" content="<?php echo $baseUrl;?>img/favicon/win8-tile-150x150.png"> |
||
| 135 | <meta name="msapplication-wide310x150logo" content="<?php echo $baseUrl;?>img/favicon/win8-tile-310x150.png"> |
||
| 136 | <meta name="msapplication-square310x310logo" content="<?php echo $baseUrl;?>img/favicon/win8-tile-310x310.png"> |
||
| 137 | </head> |
||
| 138 | |||
| 139 | <body> |
||
| 140 | <header> |
||
| 141 | <nav class="navbar navbar-full navbar-dark navbar-fixed-top"> |
||
| 142 | <div class="container"> |
||
| 143 | <h1> |
||
| 144 | <a href="./admin.php" class="spinnable"> |
||
| 145 | |||
| 146 | JodelBlue <i class="fa fa-refresh fa-1x"></i></a> |
||
| 147 | </h1> |
||
| 148 | </div> |
||
| 149 | </nav> |
||
| 150 | </header> |
||
| 151 | |||
| 152 | <div class="mainContent container"> |
||
| 153 | <div class="content row"> |
||
| 154 | <article class="topContent col-sm-8"> |
||
| 155 | |||
| 156 | <content id="posts" class="adminpanel"> |
||
| 157 | <?php if($userIsAdmin) { ?> |
||
| 158 | <h2>account management</h2> |
||
| 159 | <form method="post"> |
||
| 160 | <div> |
||
| 161 | <?php |
||
| 162 | $result = $db->query("SELECT COUNT(*) FROM accounts"); |
||
| 163 | echo $result->fetch_row()[0]; |
||
| 164 | ?> |
||
| 165 | accounts in the database</div> |
||
| 166 | <button type="submit" name="createAccount" value="TRUE">Create new Account</button> |
||
| 167 | </form> |
||
| 168 | <br> |
||
| 169 | <h3>Create Voter</h3> |
||
| 170 | <form method="post"> |
||
| 171 | <div> |
||
| 172 | <input type="text" name="user_token" placeholder="user_token" required="true"><br> |
||
| 173 | <input type="number" name="remaining_votes" placeholder="remaining_votes" required="true"><br> |
||
| 174 | <input type="text" name="device_uid" placeholder="device_uid" required="true"><br> |
||
| 175 | <input type="text" name="rights" placeholder="rights" required="true"><br> |
||
| 176 | <button type="submit" name="createVoter" value="TRUE">Create new Voter</button> |
||
| 177 | </form> |
||
| 178 | <hr> |
||
| 179 | <?php |
||
| 180 | } |
||
| 181 | |||
| 182 | if($userIsVoter) { |
||
| 183 | ?> |
||
| 184 | <h2>Voting</h2> |
||
| 185 | <form> |
||
| 186 | <input placeholder="quantity" id="quantityDelay" type="number" name="quantity"><br> |
||
| 187 | <input placeholder="min interval" id="minDelay" value="<?php echo $config['minInterval'];?>" type="text" name="min"><br> |
||
|
0 ignored issues
–
show
|
|||
| 188 | <input placeholder="max interval" id="maxDelay" value="<?php echo $config['maxInterval'];?>" type="text" name="max"><br> |
||
|
0 ignored issues
–
show
|
|||
| 189 | <input placeholder="postId" id="postIdDelay" value="<?php if(isset($_GET['postId'])) echo $_GET['postId'];?>" type="text" name="postId"><br> |
||
| 190 | <button type="button" name="vote" value="up" class="half" onclick="voteWithAjax('up');">Upvote</button> |
||
| 191 | <button type="button" name="vote" value="down" class="half" onclick="voteWithAjax('down');">Downvote</button><br> |
||
| 192 | </form> |
||
| 193 | <progress id="progressDelay" value="0" max="100"></progress> |
||
| 194 | <div id="ResponseMessage"></div> |
||
| 195 | <div id="ResponseCaptcha"></div> |
||
| 196 | |||
| 197 | <?php } ?> |
||
| 198 | </content> |
||
| 199 | </article> |
||
| 200 | </div> |
||
| 201 | </div> |
||
| 202 | |||
| 203 | |||
| 204 | <!-- jQuery, Tether, Bootstrap JS and own--> |
||
| 205 | <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js" integrity="sha384-3ceskX3iaEnIogmQchP8opvBy3Mi7Ce34nWjpBIwVTHfGYWQS9jwHDVRnpKKHJg7" crossorigin="anonymous"></script> |
||
|
0 ignored issues
–
show
|
|||
| 206 | <script src="https://cdnjs.cloudflare.com/ajax/libs/tether/1.3.7/js/tether.min.js" integrity="sha384-XTs3FgkjiBgo8qjEjBk0tGmf3wPrWtA6coPfQDfFEY8AnYJwjalXCiosYRBIBZX8" crossorigin="anonymous"></script> |
||
|
0 ignored issues
–
show
|
|||
| 207 | <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.5/js/bootstrap.min.js" integrity="sha384-BLiI7JTZm+JWlgKa0M0kGRpJbF2J8q+qreVrKBC47e3K6BW78kGLrCkeRX6I9RoK" crossorigin="anonymous"></script> |
||
|
0 ignored issues
–
show
|
|||
| 208 | |||
| 209 | <script> |
||
| 210 | //delayed voting |
||
| 211 | var rekData; |
||
| 212 | function voteWithAjax(type) |
||
| 213 | { |
||
| 214 | var id = $("#postIdDelay").val(); |
||
| 215 | var quantity = parseInt($("#quantityDelay").val()); |
||
| 216 | var minTime = parseFloat($("#minDelay").val()); |
||
| 217 | var maxTime = parseFloat($("#maxDelay").val()); |
||
| 218 | var data = {"vote": type, |
||
| 219 | "id":id, |
||
| 220 | "i": 1, |
||
| 221 | "quantity":quantity, |
||
| 222 | "minTime":minTime, |
||
| 223 | "maxTime":maxTime}; |
||
| 224 | |||
| 225 | $("#progressDelay").attr("max", quantity); |
||
| 226 | $("#progressDelay").val(0); |
||
| 227 | if (minTime > maxTime) |
||
| 228 | { |
||
| 229 | $("#ResponseMessage").html("min interval is greater than max interval"); |
||
| 230 | |||
| 231 | } |
||
| 232 | else if (id == "") |
||
| 233 | { |
||
| 234 | $("#ResponseMessage").html("please enter a postId"); |
||
| 235 | } |
||
| 236 | else if (isNaN(quantity)) |
||
| 237 | { |
||
| 238 | $("#ResponseMessage").html("please enter a valid quantity of votes"); |
||
| 239 | } |
||
| 240 | else |
||
| 241 | { |
||
| 242 | voteRek(data); |
||
| 243 | } |
||
| 244 | } |
||
| 245 | |||
| 246 | function voteRek(data) |
||
| 247 | { |
||
| 248 | $.ajax({ |
||
| 249 | type: "POST", |
||
| 250 | url: "<?php echo $baseUrl;?>vote-ajax.php", |
||
| 251 | data: {"vote" : data["vote"], |
||
| 252 | "postId" : data["id"]}, |
||
| 253 | success: function(result){ |
||
| 254 | $("#progressDelay").val(data["i"]); |
||
| 255 | var response; |
||
| 256 | try |
||
| 257 | { |
||
| 258 | response = JSON.parse(result); |
||
| 259 | } catch (e) { |
||
| 260 | //voteRek(data); |
||
| 261 | } |
||
| 262 | if (response["success"] != true) |
||
| 263 | { |
||
| 264 | $("#ResponseMessage").html(response["message"]); |
||
| 265 | if (response["captcha"] != null) { |
||
| 266 | rekData = data; |
||
| 267 | $("#ResponseCaptcha").append( "<div id='captchaWrapper_" + data["i"] + "'><form><p>Check all images with Coons on it (Coons look like <img style=\"height: 1.0em; width: unset;\" src=\"img/coon.png\">).</p><img src='" + response["captcha"]["image_url"] + "' style='width:100%'><div class='captchaWrapper'><input id='box_0' type='checkbox'><input id='box_1' type='checkbox'><input id='box_2' type='checkbox'><input id='box_3' type='checkbox'><input id='box_4' type='checkbox'><input id='box_5' type='checkbox'><input id='box_6' type='checkbox'><input id='box_7' type='checkbox'><input id='box_8' type='checkbox'></div><button type=\"button\" onclick=\"verifyAccount(" + data["i"] + ", '" + response["captcha"]["key"] + "' , '" + response["deviceUid"] + "');\">Verify</button></form></div>"); |
||
| 268 | //verifyAccount(data["i"], response["captcha"]["key"], response["deviceUid"]); |
||
| 269 | } |
||
| 270 | } |
||
| 271 | else if (data["i"] < data["quantity"]) |
||
| 272 | { |
||
| 273 | $("#ResponseMessage").html(data["i"] + " of " + data["quantity"]); |
||
| 274 | data["i"] += 1; |
||
| 275 | setTimeout(function(){voteRek(data)}, getRandomFloat(data["minTime"],data["maxTime"])*1000); |
||
| 276 | } else { |
||
| 277 | $("#ResponseMessage").html(data["quantity"] + " votes completed"); |
||
| 278 | } |
||
| 279 | } |
||
| 280 | }); |
||
| 281 | } |
||
| 282 | |||
| 283 | function verifyAccount(id, key, deviceUid) |
||
| 284 | { |
||
| 285 | var solution = ""; |
||
| 286 | for (i=0; i<9; i++) { |
||
| 287 | var box = $("#box_"+i); |
||
| 288 | if (box.is(':checked') == true) |
||
| 289 | { |
||
| 290 | if (solution != "") |
||
| 291 | { |
||
| 292 | solution += "-" + i; |
||
| 293 | } |
||
| 294 | else |
||
| 295 | { |
||
| 296 | solution = i; |
||
| 297 | } |
||
| 298 | |||
| 299 | } |
||
| 300 | } |
||
| 301 | console.log(solution); |
||
| 302 | $.ajax({ |
||
| 303 | type: "POST", |
||
| 304 | url: "<?php echo $baseUrl;?>vote-ajax.php?solution=" + solution + "&key="+key, |
||
| 305 | data: {"deviceUid" : deviceUid}, |
||
| 306 | success: function(result){ |
||
| 307 | var response = JSON.parse(result); |
||
| 308 | console.log("Verification = "+response["success"]) |
||
| 309 | $("#captchaWrapper_"+id).remove(); |
||
| 310 | voteRek(rekData); |
||
| 311 | } |
||
| 312 | }); |
||
| 313 | } |
||
| 314 | |||
| 315 | function getRandomFloat(min, max) |
||
| 316 | { |
||
| 317 | return Math.floor(Math.random() * (max - min)) + min; |
||
| 318 | } |
||
| 319 | |||
| 320 | </script> |
||
| 321 | </body> |
||
| 322 | </html> |
Overly long lines are hard to read on any screen. Most code styles therefor impose a maximum limit on the number of characters in a line.