<?php require '../classes/adminauth.php'; require '../classes/systemmanager.php'; $a = new adminauth(); $s = new systemmanager(); if (!$a->CheckPermission('sys_config')) { require '../classes/gui.php'; include '../includes/header.php'; include 'menu.php'; echo '<center><b>You have no permission to manage the system config.</b></center></body></html>'; die; } include '../includes/header.php'; include 'menu.php'; echo '<center><b>Manage system config</b></center><br><br>'; if ($_GET['do'] == 'update_general') { $s->SetSetting('vouchertext1', $_POST['vouchertext1']); $s->SetSetting('vouchertext2', $_POST['vouchertext2']); $s->SetSetting('pre-form-text', $_POST['pre-form-text']); $s->SetSetting('post-form-text', $_POST['post-form-text']); $s->SetSetting('deny_drop_devices', $_POST['deny_drop_devices']); if ($_POST['use_verification'] == 'y') { $s->SetSetting('use_verification', 'y'); } else { $s->SetSetting('use_verification', 'n'); } if ($_POST['use_exp_date'] == 'y') { $s->SetSetting('use_exp_date', 'y'); } else { $s->SetSetting('use_exp_date', 'n');
<?php require '../classes/adminauth.php'; $a = new adminauth(); if (!$a->CheckPermission('drop_device')) { require '../classes/gui.php'; $agui = new admingui(); include '../includes/header.php'; include 'menu.php'; echo '<center><b>You have no permission to drop devices.</b></center></body></html>'; die; } require '../classes/vouchermanager.php'; $v = new vouchermanager(); $v->DropDevice($_GET['type'], $_GET['addr']); header('Location: index.php');
<?php require '../classes/adminauth.php'; $a = new adminauth(); require '../classes/vouchermanager.php'; require '../classes/gui.php'; require '../classes/usermanager.php'; include '../includes/header.php'; include 'menu.php'; $agui = new admingui(); $u = new usermanager(); if ($_GET['do'] == '') { if (!$a->CheckPermission('view_users')) { echo '<center><b>You have no permission to edit users.</b></center></body></html>'; die; } echo '<center><b>User list</b></center><br><br>'; $agui->ListUsers($u->GetUserlist()); if ($a->CheckPermission('add_users')) { echo '<br><br><ul><u>Add User:</u><br> <form action="' . $_SERVER['PHP_SELF'] . '?do=add" method="post"> Username: <input type="text" name="add_user" size="20" class="formstyle"><br> Password: <input type="password" name="add_pwd" size="20" class="formstyle"><br> Repeat: <input type="password" name="add_repeat" size="20" class="formstyle"><br><br> <input type="submit" value="Add user" class="formstyle"> </form></ul>'; } } if ($_GET['do'] == 'add') { if (!$a->CheckPermission('add_users')) { echo '<center><b>You have no permission to add users.</b></center></body></html>';
<?php require '../classes/adminauth.php'; $a = new adminauth(); if (!$a->CheckPermission('drop_voucher')) { require '../classes/gui.php'; $agui = new admingui(); include '../includes/header.php'; include 'menu.php'; echo '<center><b>You have no permission to drop vouchers.</b></center></body></html>'; die; } require '../classes/vouchermanager.php'; $v = new vouchermanager(); $v->DropVoucher($_GET['vid'], true); header('Location: index.php');
<?php require '../classes/adminauth.php'; require '../classes/vouchermanager.php'; require '../classes/gui.php'; $a = new adminauth(); $v = new vouchermanager(); $agui = new admingui(); include '../includes/header.php'; include 'menu.php'; echo '<center><b>Active vouchers:</b></center><br>'; // List all vouchers if ($a->CheckPermission('view_voucher')) { $agui->ListVouchers($v->GetVoucherList()); } else { echo '<center><i>You are now allowed to view vouchers.</i></center>'; } ?> </body> </html>
<?php require '../classes/adminauth.php'; require '../classes/systemmanager.php'; $a = new adminauth(); $s = new systemmanager(); if (!$a->CheckPermission('add_voucher')) { require '../classes/gui.php'; include '../includes/header.php'; include 'menu.php'; echo '<center><b>You have no permission to add vouchers.</b></center></body></html>'; die; } include '../includes/header.php'; include 'menu.php'; // Has a number been entered or do we have to display the form? Has the user set how long the voucher should be valid? if (is_numeric($_POST['cnt']) && trim($_POST['cnt']) != '' && ($_POST['d'] != 0 || $_POST['h'] != 0 || $_POST['m'] != 0 || ($_POST['e_d'] != 0 || $_POST['e_h'] != 0 || $_POST['e_m'] != 0)) && ($_POST['start_expire'] != '' || $s->GetSetting('force_start_exp') == 'y')) { // Include and load the vouchermanager require '../classes/vouchermanager.php'; $v = new vouchermanager(); // Replace entered values with default values, if enforced. This prevents the user from injecting forbidden values to the system if ($s->GetSetting('force_device-qty') == 'y') { $_POST['dev-cnt'] = $s->GetSetting('default_device-qty'); } if ($s->GetSetting('force_start_exp') == 'y') { if ($s->GetSetting('default_start_exp') == 'creation') { $_POST['start_expire'] = 'now'; } else { $_POST['start_expire'] = 'given'; } }