admin.php

<?php
session_start();

//INCLUDES
require_once("config.php");
require_once("db/connect.php");
require_once("classes/functions.php");

//USED CLASSES
require_once("classes/settings.php");
require_once("classes/user.php");
require_once("classes/anno.php");
require_once("classes/pages.php");
require_once("classes/menu.php");

//LOGGED IN? / SESSION

//$loginform = TRUE;
//Remove to have the full login form show up on this page.

require("inc/user.php");

//PAGE TITLE
$pagetitle = "Admin CP";

//PAGE CODE
$pagecontent = "";
if ($sessus->adminusers == TRUE || $sessus->adminpages == TRUE || $sessus->admindivisions == TRUE || $sessus->adminnews == TRUE || $sessus->adminadmin == TRUE) {
	if (isset($_GET['action']) && $_GET['action'] != "") {
		if ($_GET['action'] == "approval" && $sessus->adminusers == TRUE) {
			$pagecontent .= '<h3>Users awaiting approval</h3>';

			if (isset($_POST['a-id']) && $_POST['a-id'] != "") {
				$user = new user($sql, "id", $_POST['a-id']);
				if ($user->load()) {
					$user->verified = TRUE;
					if ($user->save()) {
						$pagecontent .= '<div class="notification green"><p>User has been verified.</p></div>';
					} else {
						$pagecontent .= '<div class="notification red"><p>Failed to approve user: Could not save user info.</p></div>';
					}
				} else {
					$pagecontent .= '<div class="notification red"><p>Failed to approve user: Could not load user info.</p></div>';
				}
			} 

			if ($list = $sql->query("SELECT * FROM wolfvtc_users WHERE verified=FALSE")) {
				if ($list->num_rows == 0) {
					$pagecontent .= '<div class="notification red"><p>No users awaiting approval.</p></div>';
				} else {
					$pagecontent .= '<table class="table" id="verifylist"><thead>
					<tr>
						<th>ID</th>
						<th>Username</th>
						<th>Email</th>
						<th>Signed up</th>
						<th>Banned</th>
						<th>Actions</th>
					</tr></thead><tbody>';

					while ($row = $list->fetch_assoc()) {
						$pagecontent .= '<tr>
						<td>' . $row['id'] . '</td>
						<td>' . $row['username'] . '</td>
						<td>' . $row['email'] . '</td>
						<td>' . $row['membersince'] . '</td>';

						if ($row['banned'] == TRUE) {
							$banned = "Yes";
						} else {
							$banned = "No";
						}
						$pagecontent .= '<td>' . $banned . '</td>
						<td>
							<form action="admin.php?action=approval" method="post" class="link">
								<input type="hidden" name="a-id" value="' . $row['id'] . '">
								<input type="submit" value="Verify">
							</form>
						</td>
						</tr>';
					}

					$pagecontent .= '</tbody></table>
					<script>$(document).ready(function() 
					    { 
					        $("#verifylist").tablesorter(); 
					    } 
					); 
					</script>';
				}
			} else {
				$pagecontent .= '<div class="notification red"><p>Failed to load users.</p></div>';
			}
		} elseif ($_GET['action'] == "users" && $sessus->adminusers == TRUE) {
			if (isset($_GET['id'])) {
				$pagecontent .= '<h3>Edit user</h3>';
				if (intval($_GET['id']) != 0) {
					$user = new user($sql, "id", intval($_GET['id']));
				} elseif (isMail($_GET['id']) == TRUE) {
					$user = new user($sql, "email", e($_GET['id']));
				} else {
					$user = new user($sql, "username", e($_GET['id']));
				}
				if ($user->load()) {

					$redmsg = "";
					$greenmsg = "";

					if (isset($_POST['save'])) {
						$changed = FALSE;
						$redmsg = "";
						$greenmsg = "";

						if (isset($_POST['password'])) {
							$password = randomString(25);
							$user->changePW($password);
							$greenmsg = '<p>New user password: ' . $password . '</p>
							<p>Give it to the user.</p>';
							$changed = TRUE;
						}

						if (isset($_POST['verified'])) {
							$user->verified = TRUE;
							$changed = TRUE;
						} else {
							$user->verified = FALSE;
							$changed = TRUE;
						}

						if (isset($_POST['division'])) {
							$user->division = intval($_POST['division']);
							$changed = TRUE;
						}

						if (isset($_POST['divisionapproved']) && $user->division != 0) {
							$user->divisionapproved = TRUE;
							$changed = TRUE;
						} else {
							$user->divisionapproved = FALSE;
							$changed = TRUE;
						}

						if ($sessus->admindivisions == TRUE) {
							if (isset($_POST['divisionadmin']) && $user->division != 0) {
								$user->divisionadmin = TRUE;
								$changed = TRUE;
							} else {
								$user->divisionadmin = FALSE;
								$changed = TRUE;
							}
						}

						if ($sessus->adminadmin == TRUE) {
							if (isset($_POST['adminusers'])) {
								$user->adminusers = TRUE;
								$changed = TRUE;
							} else {
								$user->adminusers = FALSE;
								$changed = TRUE;
							}

							if (isset($_POST['adminpages'])) {
								$user->adminpages = TRUE;
								$changed = TRUE;
							} else {
								$user->adminpages = FALSE;
								$changed = TRUE;
							}

							if (isset($_POST['admindivisions'])) {
								$user->admindivisions = TRUE;
								$changed = TRUE;
							} else {
								$user->admindivisions = FALSE;
								$changed = TRUE;
							}

							if (isset($_POST['adminnews'])) {
								$user->adminnews = TRUE;
								$changed = TRUE;
							} else {
								$user->adminnews = FALSE;
								$changed = TRUE;
							}

							if (isset($_POST['adminadmin'])) {
								$user->adminadmin = TRUE;
								$changed = TRUE;
							} else {
								$user->adminadmin = FALSE;
								$changed = TRUE;
							}
						}

						if ($changed == TRUE) {
							if ($user->save()) {
								$greenmsg .= "<p>User information saved.</p>";
							} else {
								$redmsg .= "<p>Failed to save user information.</p>";
							}
						}

						if (isset($greenmsg) && $greenmsg != "") {
							$greenmsg = '<div class="notification green">' . $greenmsg . '</div>';
						}
						if (isset($redmsg) && $redmsg != "") {
							$redmsg = '<div class="notification red">' . $redmsg . '</div>';
						}
					}

					$pagecontent .= $redmsg . $greenmsg;

					//GENERATING SOME OPTIONS
					//division list
					$divisions = '<option value="0">None</option>';
					$divs = $sql->query("SELECT * FROM wolfvtc_divisions");
					while ($row = $divs->fetch_assoc()) {
						$hidden = "";
						if ($row['public'] == FALSE) {
							$hidden = " (private)";
						}
						$default = "";
						if ($row['id'] == $user->division) {
							$default = " selected";
						}
						$divisions .= '<option value="' . $row['id'] . '"' . $default . '>' . $row['name'] . $hidden . '</option>';
					}

					//division approved
					$divapp = '<input type="checkbox" name="divisionapproved" value="yes"';
					if ($user->divisionapproved == TRUE) {
						$divapp .= " checked>";
					} else {
						$divapp .= ">";
					}

					//division admin
					if ($sessus->admindivisions == TRUE) {
						$divad = '<input type="checkbox" name="divisionadmin" value="yes"';
						if ($user->divisionadmin == TRUE) {
							$divad .= " checked>";
						} else {
							$divad .= ">";
						}
						$divad .= " User is an admin for the division.";
					} else {
						if ($user->divisionadmin == TRUE) {
							$divad = "Yes";
						} else {
							$divad = "No";
						}
					}

					//banned
					if ($user->banned == TRUE) {
						$bannedby = new user($sql, "id", $user->bannedby);
						if ($bannedby->load()) {
							$bannedby = $bannedby->username;
						} else {
							$bannedby = "invalid user";
						}
						$banned = "Yes, at " . $user->bannedtime . " for " . $user->bannedreason . " by " . $bannedby;
					} else {
						$banned = "No";
					}

					//verified
					$verified = '<input type="checkbox" name="verified" value="yes"';
					if ($user->verified == TRUE) {
						$verified .= " checked>";
					} else {
						$verified .= ">";
					}

					//ADMIN PERMISSION CHANGES
					$adminperms = "";
					if ($sessus->adminadmin == TRUE) {
						//editusers
						$adminusers = '<input type="checkbox" name="adminusers" value="yes"';
						if ($user->adminusers == TRUE) {
							$adminusers .= " checked>";
						} else {
							$adminusers .= ">";
						}

						//edit pages
						$adminpages = '<input type="checkbox" name="adminpages" value="yes"';
						if ($user->adminpages == TRUE) {
							$adminpages .= " checked>";
						} else {
							$adminpages .= ">";
						}

						//edit divisions
						$admindivisions = '<input type="checkbox" name="admindivisions" value="yes"';
						if ($user->admindivisions == TRUE) {
							$admindivisions .= " checked>";
						} else {
							$admindivisions .= ">";
						}

						//news
						$adminnews = '<input type="checkbox" name="adminnews" value="yes"';
						if ($user->adminnews == TRUE) {
							$adminnews .= " checked>";
						} else {
							$adminnews .= ">";
						}

						//superadminthingy
						$adminadmin = '<input type="checkbox" name="adminadmin" value="yes"';
						if ($user->adminadmin == TRUE) {
							$adminadmin .= " checked>";
						} else {
							$adminadmin .= ">";
						}

						$adminperms = '<tr>
							<th></th>
							<td><h4>Permissions</h4></td>
							<td></td>
						</tr>
						<tr>
							<th>Users</th>
							<td>' .  $adminusers . ' Can approve and edit users</td>
							<td></td>
						</tr>
						<tr>
							<th>Pages</th>
							<td>' .  $adminpages . ' Can create and edit pages</td>
							<td></td>
						</tr>
						<tr>
							<th>Divisions</th>
							<td>' .  $admindivisions . ' Can create and edit divisions</td>
							<td></td>
						</tr>
						<tr>
							<th>News</th>
							<td>' .  $adminnews . ' Can create and edit news articles</td>
							<td></td>
						</tr>
						<tr>
							<th>Superadmin</th>
							<td>' .  $adminadmin . ' Can edit permissions and other settings</td>
							<td></td>
						</tr>';
					}

					//thing itself
					$pagecontent .= '<form action="admin.php?action=users&id=' . intval($_GET['id']) . '" method="post">
					<table class="form">
						<tr>
							<th></th>
							<td><h4>General info</h4></td>
							<td></td>
						</tr>
						<tr>
							<th>ID</th>
							<td>' . $user->id . '</td>
							<td></td>
						</tr>
						<tr>
							<th>Username</th>
							<td>' . $user->username . '</td>
							<td></td>
						</tr>
						<tr>
							<th>Email</th>
							<td>' . $user->email . '</td>
							<td></td>
						</tr>
						<tr>
							<th>Password</th>
							<td><input type="checkbox" name="password" value="generate"> Generate new password</td>
							<td></td>
						</tr>
						<tr>
							<th>Verified</th>
							<td>' . $verified . ' User is verified</td>
							<td></td>
						</tr>
						<tr>
							<th>Banned</th>
							<td>' . $banned . '</td>
							<td></td>
						</tr>
						<tr>
							<th></th>
							<td><h4>Division</h4></td>
							<td></td>
						</tr>
						<tr>
							<th>Division</th>
							<td><select name="division">' . $divisions . '</select></td>
							<td></td>
						</tr>
						<tr>
							<th>Approved</th>
							<td>' .  $divapp . ' User is approved into the division</td>
							<td></td>
						</tr>
						<tr>
							<th>Division Admin</th>
							<td>' .  $divad . '</td>
							<td></td>
						</tr>
						' . $adminperms . '
						<tr>
							<th><input type="hidden" name="save" value="yes"></th>
							<td><input type="submit" value="Save" size="35"> or <span class="cancel"><a href="admin.php?action=users">cancel</a></span></td>
							<td></td>
						</tr>
					</table>
					</form>';

					$logins = $sql->query("SELECT * FROM wolfvtc_logins WHERE userid=" . intval($user->id));
					if ($logins->num_rows >= 1) {
						$pagecontent .= '<h4>Recorded logins</h4>
						<table class="table" id="logins"><thead>
						<tr>
							<th>Date/time</th>
							<th>IP</th>
						</tr>
						</thead><tbody>';

						while ($row = $logins->fetch_assoc()) {
							$pagecontent .= '<tr>
							<td>' . $row['datetime'] . '</td>
							<td>' . $row['ip'] . '</td>
							</tr>';
						}

						$pagecontent .= '</tbody></table>

						<script>$(document).ready(function() 
						    { 
						        $("#logins").tablesorter(); 
						    } 
						); 
						</script>';
					} else {
						$pagecontent .= "<p>The user has no recorded logins.</p>";
					}
				} else {
					$pagecontent .= '<div class="notification red"><p>User not found.</p></div>';
				}
			} else {
				$pagecontent .= '<h3>User list</h3>';

				if ($list = $sql->query("SELECT * FROM wolfvtc_users")) {
					if ($list->num_rows == 0) {
						$pagecontent .= '<div class="notification red"><p>No users (then how are you here? o.O)</p></div>';
					} else {
						$pagecontent .= '<table class="table" id="userlist"><thead>
						<tr>
							<th>ID</th>
							<th>Username</th>
							<th>Email</th>
							<th>Signed up</th>
							<th>Verified</th>
							<th>Banned</th>
							<th>Actions</th>
						</tr></thead><tbody>';

						while ($row = $list->fetch_assoc()) {
							$pagecontent .= '<tr>
							<td>' . $row['id'] . '</td>
							<td>' . $row['username'] . '</td>
							<td>' . $row['email'] . '</td>
							<td>' . $row['membersince'] . '</td>';

							if ($row['verified'] == TRUE) {
								$verified = "Yes";
							} else {
								$verified = "No";
							}
							$pagecontent .= '<td>' . $verified . '</td>';

							if ($row['banned'] == TRUE) {
								$banned = "Yes";
							} else {
								$banned = "No";
							}
							$pagecontent .= '<td>' . $banned . '</td>
							<td>
								<a href="admin.php?action=users&id=' . $row['id'] . '" class="linkify">Edit user</a>
								<br>
								<a href="admin.php?action=bans&edit=' . $row['id'] . '" class="linkify">Edit ban</a>
							</td>
							</tr>';
						}
						$pagecontent .= '</tbody></table>
						<script>$(document).ready(function() 
						    { 
						        $("#userlist").tablesorter(); 
						    } 
						); 
						</script>';
					}
				} else {
					$pagecontent .= '<div class="notification red"><p>Failed to load users.</p></div>';
				}
			}
		} elseif ($_GET['action'] == "bans" && $sessus->adminusers == TRUE) {
			if (isset($_GET['edit']) && intval($_GET['edit']) != 0) {
				$pagecontent .= "<h3>Edit user ban</h3>";
				$ban = new user($sql, "id", intval($_GET['edit']));
				if ($ban->load()) {

					$changed = FALSE;
					$redmsg = "";
					$greenmsg = "";
					if (isset($_POST['save'])) {
						if (isset($_POST['isbanned'])) {
							$changed = TRUE;
							$ban->banned = TRUE;
						} else {
							$changed = TRUE;
							$ban->banned = FALSE;
						}

						if (isset($_POST['banreason'])) {
							$changed = TRUE;
							if (strlen($_POST['banreason']) >= 3 && strlen($_POST['banreason']) <= 150) {
								$ban->bannedreason = $_POST['banreason'];
							} elseif ($ban->banned == FALSE && $_POST['banreason'] == "") {
								$changed = TRUE;
								$ban->bannedreason = "";
							} else {
								$redmsg .= "<p>You must include a ban reason between 3 and 150 characters long.<p>";
							}
						}

						if ($ban->save()) {
							$greenmsg .= "<p>The changes has been saved.</p>";
						} else {
							$redmsg .= "<p>Failed to save changes.</p>";
						}
					}

					//messages
					if (isset($greenmsg) && $greenmsg != "") {
						$greenmsg = '<div class="notification green">' . $greenmsg . '</div>';
					}

					if (isset($redmsg) && $redmsg != "") {
						$redmsg = '<div class="notification red">' . $redmsg . '</div>';
					}

					//Is banned? Checkbox generated.
					$banned = '<input type="checkbox" name="isbanned" value="yes"';
					if ($ban->banned == TRUE) {
						$banned .= " checked>";
					} else {
						$banned .= ">";
					}

					//verified
					if ($ban->verified == TRUE) {
						$verified = "Yes";
					} else {
						$verified = "No";
					}

					$pagecontent .= $redmsg . $greenmsg . '
					<form method="post" action="admin.php?action=bans&edit=' . intval($_GET['edit']) . '">
					<table>
					<tr>
						<th>Username</th>
						<td>' . $ban->username . '</td>
						<td></td>
					</tr>
					<tr>
						<th>Member Since</th>
						<td>' . $ban->membersince . '</td>
						<td></td>
					</tr>
					<tr>
						<th>Is Verified?</th>
						<td>' . $verified . '</td>
						<td></td>
					</tr>
					<tr>
						<th>Is banned?</th>
						<td>' . $banned . ' The user is banned</td>
						<td></td>
					</tr>
					<tr>
						<th>Ban reason</th>
						<td><div class="small"><textarea name="banreason">' . $ban->bannedreason . '</textarea></div></td>
						<td></td>
					</tr>
					<tr>
						<th><input type="hidden" name="save" value="yepsaved"></th>
						<td><input type="submit" value="Save" size="35"> or <span class="cancel"><a href="admin.php?action=bans">cancel</a></span></td>
						<td></td>
					</tr>
					</table>
					</form>';
				} else {
					$pagecontent .= '<div class="notification red"><p>The user does not exist.</p></div>';
				}
			} else {
				$pagecontent .= '<h3>Banned users</h3>';

				if ($list = $sql->query("SELECT * FROM wolfvtc_users WHERE banned=TRUE")) {
					if ($list->num_rows == 0) {
						$pagecontent .= '<div class="notification red"><p>No users have been banned. You can ban from the userlist.</p></div>';
					} else {
						$pagecontent .= '<table class="table" id="bannedusers"><thead>
						<tr>
							<th>ID</th>
							<th>Username</th>
							<th>Verified</th>
							<th>Banned by</th>
							<th>Banned at</th>
							<th>Reason</th>
							<th>Actions</th>
						</tr>
						</thead><tbody>';

						while ($row = $list->fetch_assoc()) {
							$pagecontent .= '<tr>
							<td>' . $row['id'] . '</td>
							<td>' . $row['username'] . '</td>';

							if ($row['verified'] == TRUE) {
								$verified = "Yes";
							} else {
								$verified = "No";
							}
							$pagecontent .= '<td>' . $verified . '</td>';

							$bannedby = new user($sql, "id", $row['bannedby']);
							if ($bannedby->load()) {
								$bannedby = $bannedby->username;
							} else {
								$bannedby = "Unknown user";
							}

							$pagecontent .= '<td>' . $bannedby . '</td>
							<td>' . $row['bannedtime'] . '</td>
							<td>' . newline($row['bannedreason']) . '</td>
							<td>
								<a href="admin.php?action=bans&edit=' . $row['id'] . '" class="linkify">Edit ban</a>
							</td>
							</tr>';
						}
						$pagecontent .= '</tbody></table>

						<script>$(document).ready(function() 
						    { 
						        $("#bannedusers").tablesorter(); 
						    } 
						); 
						</script>';
					}
				}
			}
		} elseif ($_GET['action'] == "news" && $sessus->adminnews == TRUE) {
			if (isset($_GET['id'])) {
				$news = new anno($sql);
				$news->id = intval($_GET['id']);

				if ($news->load()) {
					if ($news->divid == 0) {
						$redmsg = "";
						$greenmsg = "";
						$fail = FALSE;

						$content = $news->text;
						$title = $news->title;

						if (isset($_POST['save'])) {
							if (isset($_POST['title'])) {
								if (strlen($_POST['title']) >= 3 && strlen($_POST['title']) <= 50) {
									$news->title = $_POST['title'];
								} else {
									$fail = TRUE;
									$redmsg .= "<p>You must have a title between 3 and 50 characters.</p>";
								}
							} else {
								$fail = TRUE;
								$redmsg .= "<p>You must have a title between 3 and 50 characters.</p>";
							}

							if (isset($_POST['content'])) {
								$news->text = $_POST['content'];
							} else {
								$fail = TRUE;
								$redmsg .= "<p>You must have some content.</p>";
							}

							if ($fail == FALSE) {
								if ($news->save()) {
									$greenmsg .= "<p>The article has been updated.</p>";
									$content = $news->text;
									$title = $news->title;
								} else {
									$redmsg .= "<p>Failed to update article.</p>";
									$title = $_POST['title'];
									$content = $_POST['content'];
								}
							} else {
								$title = $_POST['title'];
								$content = $_POST['content'];
							}

							if ($redmsg != "") {
								$redmsg = '<div class="notification red">' . $redmsg . '</div>';
							}

							if ($greenmsg != "") {
								$greenmsg = '<div class="notification green">' . $greenmsg . '</div>';
							}
						}

						$pagecontent .= '<h3>New article</h3>' . $redmsg . $greenmsg . '

						<form method="post" action="admin.php?action=news&id=' . $_GET['id'] . '">
						<h4>Title:<h4>
						<input type="text" size="50" name="title" value="' . $title . '">

						<h4>Content:</h4>
						<div class="large"><textarea name="content" class="large" id="large">' . $content . '</textarea></div>
						<span class="html">HTML enabled - useful tags: p, a and img.</span>
						<input type="hidden" name="save" value="yes">
						<p><input type="submit" value="Save" size="35"> or <span class="cancel"><a href="admin.php?action=news">cancel</a></span></p>
						</form>';
					} else {
						$pagecontent .= '<div class="notification red"><p>The article does not exist.</p></div>';
					}
				} else {
					$pagecontent .= '<div class="notification red"><p>The article does not exist.</p></div>';
				}
			} elseif (isset($_GET['new'])) {
				$redmsg = "";
				$greenmsg = "";
				$fail = FALSE;

				$content = '';
				$title = '';

				if (isset($_POST['save'])) {
					$news = new anno($sql);
					$news->divid = 0;
					$news->userid = $sessus->id;
					$news->datetime = currentTime();

					if (isset($_POST['title'])) {
						if (strlen($_POST['title']) >= 3 && strlen($_POST['title']) <= 50) {
							$news->title = $_POST['title'];
						} else {
							$fail = TRUE;
							$redmsg .= "<p>You must have a title between 3 and 50 characters.</p>";
						}
					} else {
						$fail = TRUE;
						$redmsg .= "<p>You must have a title between 3 and 50 characters.</p>";
					}

					if (isset($_POST['content'])) {
						$news->text = $_POST['content'];
					} else {
						$fail = TRUE;
						$redmsg .= "<p>You must have some content.</p>";
					}

					if ($fail == FALSE) {
						if ($news->save()) {
							$greenmsg .= "<p>The article has been published.</p>";
						} else {
							$redmsg .= "<p>Failed to save article.</p>";
							$title = $_POST['title'];
							$content = $_POST['content'];
						}
					} else {
						$title = $_POST['title'];
						$content = $_POST['content'];
					}

					if ($redmsg != "") {
						$redmsg = '<div class="notification red">' . $redmsg . '</div>';
					}

					if ($greenmsg != "") {
						$greenmsg = '<div class="notification green">' . $greenmsg . '</div>';
					}
				}

				$pagecontent .= '<h3>New article</h3>' . $redmsg . $greenmsg . '

				<form method="post" action="admin.php?action=news&new">
				<h4>Title:<h4>
				<input type="text" size="50" name="title" value="' . $title . '">

				<h4>Content:</h4>
				<div class="large"><textarea name="content" class="large" id="large">' . $content . '</textarea></div>
				<span class="html">HTML enabled - useful tags: p, a and img.</span>
				<input type="hidden" name="save" value="yes">
				<p><input type="submit" value="Save" size="35"> or <span class="cancel"><a href="admin.php?action=news">cancel</a></span></p>
				</form>';
			} elseif (isset($_GET['del'])) {
				$pagecontent .= '<h3>Delete Article</h3>';
				$news = new anno($sql);
				$news->id = intval($_GET['del']);
				if ($news->load()) {
					if ($news->divid == 0) {
						if ($sql->query("DELETE FROM wolfvtc_announcements WHERE id=" . intval($_GET['del']))) {
							$pagecontent .= '<div class="notification green"><p>The article has been deleted.</p></div>';
						} else {
							$pagecontent .= '<div class="notification red"><p>Failed to delete article.</p></div>';
						}
					} else {
						$pagecontent .= '<div class="notification red"><p>Article does not exist.</p></div>';
					}
				} else {
					$pagecontent .= '<div class="notification red"><p>Article does not exist.</p></div>';
				}
				$pagecontent .= '<p><span class="cancel"><a href="admin.php?action=news">Back</a></span></p>';
			} else {
				$list = $sql->query("SELECT * FROM wolfvtc_announcements WHERE divid=0 ORDER BY datetime DESC");

				$pagecontent .= '<h3>News Articles</h3>
				<p><a href="admin.php?action=news&new" class="linkify">Create new article</a></p>';
				if ($list->num_rows >= 1) {
					$pagecontent .= '<table class="table" id="newslist"><thead>
					<tr>
						<th>ID</th>
						<th>Title</th>
						<th>Written by</th>
						<th>Published at</th>
						<th>Actions</th>
					</tr>
					</thead><tbody>';

					while ($row = $list->fetch_assoc()) {
						$user = new user($sql, "id", $row['userid']);
						if ($user->load()) {
							$user = $user->username;
						} else {
							$user = "Unknown user";
						}

						$pagecontent .= '
						<tr>
							<td>' . $row['id'] . '</td>
							<td>' . $row['title'] . '</td>
							<td>' . $user . '</td>
							<td>' . $row['datetime'] . '</td>
							<td><a href="admin.php?action=news&id=' . $row['id'] . '" class="linkify">Edit</a> <a href="admin.php?action=news&del=' . $row['id'] . '" class="linkify">Delete</a></td>
						</tr>';
					}

					$pagecontent .= '</tbody></table>
					<p><a href="admin.php?action=news&new" class="linkify">Create new article</a></p>
					<script>$(document).ready(function() 
					    { 
					        $("#newslist").tablesorter(); 
					    } 
					); 
					</script>';
				} else {
					$pagecontent .= '<div class="notification red"><p>There are no articles.</p></div>';
				}
			}
		} elseif ($_GET['action'] == "pages" && $sessus->adminpages == TRUE) {
			if (isset($_GET['id'])) {
				$page = new page($sql);
				$page->id = intval($_GET['id']);

				if ($page->load()) {
					$redmsg = "";
					$greenmsg = "";
					$fail = FALSE;

					$content = $page->text;
					$title = $page->title;

					if (isset($_POST['save'])) {
						if (isset($_POST['title'])) {
							if (strlen($_POST['title']) >= 3 && strlen($_POST['title']) <= 50) {
								$page->title = $_POST['title'];
							} else {
								$fail = TRUE;
								$redmsg .= "<p>You must have a title between 3 and 50 characters.</p>";
							}
						} else {
							$fail = TRUE;
							$redmsg .= "<p>You must have a title between 3 and 50 characters.</p>";
						}

						if (isset($_POST['content'])) {
							$page->text = $_POST['content'];
						} else {
							$fail = TRUE;
							$redmsg .= "<p>You must have some content.</p>";
						}

						if ($fail == FALSE) {
							if ($page->save()) {
								$greenmsg .= "<p>The page has been updated.</p>";
								$content = $page->text;
								$title = $page->title;
							} else {
								$redmsg .= "<p>Failed to update page.</p>";
								$title = $_POST['title'];
								$content = $_POST['content'];
							}
						} else {
							$title = $_POST['title'];
							$content = $_POST['content'];
						}

						if ($redmsg != "") {
							$redmsg = '<div class="notification red">' . $redmsg . '</div>';
						}

						if ($greenmsg != "") {
							$greenmsg = '<div class="notification green">' . $greenmsg . '</div>';
						}
					}

					$pagecontent .= '<h3>New page</h3>' . $redmsg . $greenmsg . '

					<form method="post" action="admin.php?action=pages&id=' . $_GET['id'] . '">
					<h4>Title:<h4>
					<input type="text" size="50" name="title" value="' . $title . '">

					<h4>Content:</h4>
					<div class="large"><textarea name="content" class="large" id="large">' . $content . '</textarea></div>
					<span class="html">HTML enabled - useful tags: p, a and img.</span>
					<input type="hidden" name="save" value="yes">
					<p><input type="submit" value="Save" size="35"> or <span class="cancel"><a href="admin.php?action=pages">cancel</a></span></p>
					</form>';
				} else {
					$pagecontent .= '<div class="notification red"><p>The page does not exist.</p></div>';
				}
			} elseif (isset($_GET['new'])) {
				$redmsg = "";
				$greenmsg = "";
				$fail = FALSE;

				$content = '';
				$title = '';

				if (isset($_POST['save'])) {
					$page = new page($sql);

					if (isset($_POST['title'])) {
						if (strlen($_POST['title']) >= 3 && strlen($_POST['title']) <= 50) {
							$page->title = $_POST['title'];
						} else {
							$fail = TRUE;
							$redmsg .= "<p>You must have a title between 3 and 50 characters.</p>";
						}
					} else {
						$fail = TRUE;
						$redmsg .= "<p>You must have a title between 3 and 50 characters.</p>";
					}

					if (isset($_POST['content'])) {
						$page->text = $_POST['content'];
					} else {
						$fail = TRUE;
						$redmsg .= "<p>You must have some content.</p>";
					}

					if (isset($_POST['ispublic'])) {
						$page->ispublic = TRUE;
					} else {
						$page->ispublic = FALSE;
					}

					if ($fail == FALSE) {
						if ($page->save()) {
							$greenmsg .= "<p>The page has been published.</p>";
						} else {
							$redmsg .= "<p>Failed to save page.</p>";
							$title = $_POST['title'];
							$content = $_POST['content'];
						}
					} else {
						$title = $_POST['title'];
						$content = $_POST['content'];
					}

					if ($redmsg != "") {
						$redmsg = '<div class="notification red">' . $redmsg . '</div>';
					}

					if ($greenmsg != "") {
						$greenmsg = '<div class="notification green">' . $greenmsg . '</div>';
					}
				}

				$pagecontent .= '<h3>New article</h3>' . $redmsg . $greenmsg . '

				<form method="post" action="admin.php?action=pages&new">
				<h4>Title:<h4>
				<input type="text" size="50" name="title" value="' . $title . '">

				<h4>Content:</h4>
				<div class="large"><textarea name="content" class="large" id="large">' . $content . '</textarea></div>
				<span class="html">HTML enabled - useful tags: p, a and img.</span>
				<p><input type="checkbox" name="ispublic" value="yes"> Is the page public?</p>
				<input type="hidden" name="save" value="yes">
				<p><input type="submit" value="Save" size="35"> or <span class="cancel"><a href="admin.php?action=pages">cancel</a></span></p>
				</form>';
			} elseif (isset($_GET['del'])) {
				$pagecontent .= '<h3>Delete Page</h3>';
				$page = new page($sql);
				$page->id = intval($_GET['del']);
				if ($page->load()) {
					if ($sql->query("DELETE FROM wolfvtc_pages WHERE id=" . intval($_GET['del']))) {
						$pagecontent .= '<div class="notification green"><p>The page has been deleted.</p></div>';
					} else {
						$pagecontent .= '<div class="notification red"><p>Failed to delete page.</p></div>';
					}
				} else {
					$pagecontent .= '<div class="notification red"><p>page does not exist.</p></div>';
				}
				$pagecontent .= '<p><span class="cancel"><a href="admin.php?action=pages">Back</a></span></p>';
			} else {
				$list = $sql->query("SELECT * FROM wolfvtc_pages");

				$pagecontent .= '<h3>Pages</h3>
				<p><a href="admin.php?action=pages&new" class="linkify">Create new page</a></p>';
				if ($list->num_rows >= 1) {
					$pagecontent .= '<table class="table" id="pages"><thead>
					<tr>
						<th>ID</th>
						<th>Title</th>
						<th>Public</th>
						<th>Actions</th>
					</tr>
					</thead><tbody>';

					while ($row = $list->fetch_assoc()) {
						if ($row['public'] == TRUE) {
							$publicp = "Yes";
						} else {
							$publicp = "No";
						}

						$pagecontent .= '
						<tr>
							<td>' . $row['id'] . '</td>
							<td>' . $row['title'] . '</td>
							<td>' . $publicp . '</td>
							<td><a href="admin.php?action=pages&id=' . $row['id'] . '" class="linkify">Edit</a> <a href="admin.php?action=pages&del=' . $row['id'] . '" class="linkify">Delete</a> <a href="page.php?id=' . $row['id'] . '" class="linkify">View page</a></td>
						</tr>';
					}

					$pagecontent .= '</tbody></table>
					<p><a href="admin.php?action=pages&new" class="linkify">Create new page</a></p>
					<script>$(document).ready(function() 
					    { 
					        $("#pages").tablesorter(); 
					    } 
					); 
					</script>';
				} else {
					$pagecontent .= '<div class="notification red"><p>There are no pages.</p></div>';
				}
			}
		} else { //Add new elseif here for new admin pages
			$pagecontent .= '<div class="notification red"><p>You do not have permission to view this page.</p></div>';
		}
	} else {
		//
		// ADMIN PANEL FRONT PAGE
		//

		$pagecontent .= '<h3>Admin Control Panel</h3>';

		if ($sessus->adminusers == TRUE || $sessus->adminpages == TRUE || $sessus->admindivisions == TRUE || $sessus->adminnews == TRUE || $sessus->adminadmin == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=jobs">Jobs</a></div>';
		}

		if ($sessus->adminusers == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=approval">Users awaiting approval</a></div>';
		}

		if ($sessus->adminusers == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=users">User list</a></div>';
		}

		if ($sessus->adminusers == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=bans">Ban list</a></div>';
		}

		if ($sessus->adminnews == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=news">Manage News</a></div>';
		}

		if ($sessus->adminpages == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=pages">Manage Pages</a></div>';
		}

		if ($sessus->adminadmin == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=index">Front Page</a></div>';
		}

		if ($sessus->adminpages == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=menu">Manage Menu</a></div>';
		}

		if ($sessus->admindivisions == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=divisions">Manage Divisions</a></div>';
		}

		if ($sessus->adminadmin == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=city">Cities</a></div>';
		}

		if ($sessus->adminadmin == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=cargo">Cargo</a></div>';
		}

		if ($sessus->adminusers == TRUE || $sessus->adminpages == TRUE || $sessus->admindivisions == TRUE || $sessus->adminnews == TRUE || $sessus->adminadmin == TRUE) {
			$pagecontent .= '<div class="admbutton"><a href="admin.php?action=stats">Statistics</a></div>';
		}
	}
} else {
	$pagecontent .= '<div class="notification red"><p>You do not have permission to view this page.</p></div>';
}
?>
<!DOCTYPE html>
<html>
<head>
	<?php include("inc/head.php"); ?>
	<link rel="stylesheet" type="text/css" href="style/admin.css">
	<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js"></script>
	<script type="text/javascript" src="js/jquery.tablesorter.min.js"></script> 
</head>
<body>
	<div class="wrapper">
		<div class="header">
			<?php require("inc/header.php"); ?>
		</div>
			<?php echo $userbar; ?>
		<div class="content">
			<?php echo $pagecontent; ?>
		</div>
		<div class="footer">
			<?php include("inc/footer.php"); ?>
		</div>
	</div>
</body>
</html>
<?php
require_once("db/disconnect.php");
?>