pile/www/admin.php

<?php
require '_templates/Template.php';
require '_util/PileDB.php';
require '_util/Uploader.php';


$db = new PileDB();
$uploader = new Uploader();
session_start();

if (isset($_SESSION['ID'])) {
    $page = new Template();

    if (isset($_GET["action"])) {
        switch ($_GET["action"]) {
            case "new_tag":
                $content = $page->render("admin_tag_edit.php");
                break;
            case "edit_tag":
                if (isset($_POST["Name"])) {
                    $db->updateTag(
                        $_GET["tag"],
                        $_POST["Name"],
                        $_POST["Description"]
                    );
                }
                if (!empty($_GET["tag"])) {
                    $page->tag = $db->fetchTag($_GET["tag"]);
                }
                $content = $page->render("admin_tag_edit.php");
                break;
            case "delete_tag":
                if (!empty($_GET["tag"])) {
                    $db->deleteTag($_GET["tag"]);
                    $page->text = "Tag deleted successfully.";
                    $page->redirect = "/admin.php";
                    echo $page->render('full_text.php');
                    return;
                }
                break;
            case "new_item":
                $content = $page->render("admin_doc_edit.php");
                break;
            case "edit_item":
                if (isset($_POST["Title"]) || !empty($_FILES['upfile']['name'])) {
                    $title = $_POST["Title"];

                    if (!empty($_FILES['upfile']['name'])) {
                        try {
                            if (empty($title)) {
                                $title = pathinfo($_FILES['upfile']['name'], PATHINFO_FILENAME);
                                $title = str_replace("_", " ", $title);
                                $title = trim($title);
                            }
                            $url = "http://pile.sdbs.cz/docs/" . rawurlencode($uploader->handle($_FILES, "docs/"));
                        } catch (RuntimeException $ex) {
                            $page->text = $ex->getMessage();
                            echo $page->render('full_text.php');
                            return;
                        }
                    } else {
                        $url = $_POST["URL"];
                    }

                    $doc_tags = [];
                    foreach (explode(",", $_POST["Tags"]) as $tagName) {
                        $tagName = trim($tagName);
                        $tag = $db->findTag($tagName);
                        if (!in_array($tag["ID"], $doc_tags)) {
                            array_push($doc_tags, $tag["ID"]);
                        }
                    }

                    $db->updateDoc(
                        $_GET["item"],
                        $title,
                        $_POST["Author"],
                        $_POST["Description"],
                        $_POST["Published"],
                        $url,
                        $doc_tags
                    );
                }

                if (!empty($_GET["item"])) {
                    $page->doc = $db->fetchDoc($_GET["item"]);
                }
                $content = $page->render("admin_doc_edit.php");

                break;
            case "remove":
                if (!empty($_GET["confirm"]) && $_GET["confirm"] == "yes") {
                    $db->removeDoc($_GET["item"]);
                    $page->text = "Document deleted.";
                    $page->redirect = $_GET["ret"];
                    echo $page->render("full_text.php");
                    return;
                } else {
                    $page->doc = $db->fetchDoc($_GET["item"]);
                    $content = $page->render("admin_doc_remove.php");
                }
                break;
            case "logout":
                unset($_SESSION["ID"]);
                $page->text = "See you.";
                $page->redirect = "/";
                echo $page->render("full_text.php");
                return;
        }
    } elseif (isset($_GET["tag"])) {
        $doc_list_template = new Template();
        if ($_GET["tag"] == "*") {
            $docs = $db->listDocs();
        } elseif ($_GET["tag"] == "_") {
            $docs = $db->listDocs(-1);
        } else {
            $tag = $db->findTag($_GET["tag"]);
            $docs = $db->listDocs($tag["ID"]);
            $doc_list_template->tag = $db->fetchTag($tag["ID"]);
        }
        $doc_list_template->docs = $docs;
        $content = $doc_list_template->render('admin_doc_listing.php');
    } else {
        $intro_template = new Template();
        $content = $intro_template->render('admin_intro.php');
    }

    $all_count = $db->getDocCount();
    $none_count = $db->getUntaggedDocCount();

    $tags = $db->getTags();

    $page->all_count = $all_count;
    $page->none_count = $none_count;
    $page->tags = $tags;
    $page->content = $content;
    echo $page->render('admin_wrap.php');
} else {
    $page = new Template();

    if (isset($_POST['username']) && isset($_POST['password'])) {
        $ret_id = $db->authenticate($_POST["username"], $_POST["password"]);
        if ($ret_id > 0) {
            $_SESSION['ID'] = $ret_id;
            $page->text = "You have logged in successfully.";
            $page->redirect = "admin.php";
        } else {
            $page->text = "Username and/or password incorrect.";
            $page->redirect = "/";
        }
    } else {
        $page->text = "Please log in before accessing this page.";
        $page->redirect = "/";
    }

    echo $page->render('full_text.php');
}

?>