Included tinymce WYSIWYG to project

kelvius · Mar 22, 2023 · d43562d · d43562d
1 parent 6609395
commit d43562d
Show file tree

Hide file tree

Showing 67 changed files with 3,484 additions and 28 deletions.
diff --git a/authenticate.php b/authenticate.php
@@ -1,24 +1,13 @@
 <?php
-define('ADMIN_LOGIN', 'wally');
+define('ADMIN_LOGIN', 'admin');
 
-define('ADMIN_PASSWORD', 'mypass');
+define('ADMIN_PASSWORD', 'admin');
 
 
-
-// if (!isset($_SERVER['PHP_AUTH_USER']) || !isset($_SERVER['PHP_AUTH_PW'])
-
-//     || ($_SERVER['PHP_AUTH_USER'] != ADMIN_LOGIN)
-
-//     || ($_SERVER['PHP_AUTH_PW'] != ADMIN_PASSWORD)) {
-
-//   header('HTTP/1.1 401 Unauthorized');
-
-//   header('WWW-Authenticate: Basic realm="Drip Book"');
-
-//   exit("Access Denied: Username and password required.");
-
-// }
 session_start();
+// Used to clear the session while logout is still in progress
+// session_unset(); 
+// session_destroy(); 
 $userIdSet = isset($_SESSION['user_id']);
 $userRoleSet = isset($_SESSION['user_role']);
 
@@ -30,7 +19,7 @@
     !isset($_POST['username']) && !isset($_POST['password'])
     || (($_POST['username']) != ADMIN_LOGIN) || (($_POST['password']) != ADMIN_PASSWORD)
   ) {
-    echo ("Access Denied");
+    echo ("Login Failed");
     exit;
   } else {
         $_SESSION['user_id'] = ($_POST['username']);
@@ -39,8 +28,9 @@
   }
 }
 }else{
-  echo($_SESSION['user_id']);
-  header('Location: create.php');
+  echo("Login Successful");
+ // header("refresh:5;url=create.php");
+ header('Location: create.php');
 }
 ?>
 

diff --git a/create.php b/create.php
@@ -10,7 +10,7 @@
 require('connect.php');
 //require('authenticate.php');
 
-    ?>
+?>
 
 <!DOCTYPE html>
 <html lang="en">
@@ -21,6 +21,12 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <link rel="stylesheet" href="main.css">
     <title>Edit this Post!</title>
+    <script src='tinymce/tinymce.min.js'></script>
+    <script>
+        tinymce.init({
+            selector: '#content'
+        });
+    </script>
 </head>
 
 <body>
@@ -39,15 +45,15 @@
                     <legend>Edit Drip Post</legend>
                     <p>
                         <label for="title">Title</label>
-                        <input name="title" id="title" >
+                        <input name="title" id="title">
                     </p>
                     <p>
                         <label for="content">Content</label>
                         <textarea name="content" id="content"></textarea>
                     </p>
                     <p>
                         <input type="hidden" name="id">
-                        <input type="submit" name="create" value="Create" >
+                        <input type="submit" name="create" value="Create">
                     </p>
                 </fieldset>
             </form>

diff --git a/edit.php b/edit.php
@@ -0,0 +1,89 @@
+<?php
+
+/*******w******** 
+Name: John Kelvin A. Valerio
+Date: 03/13/23
+Description: Project 
+****************/
+
+require('connect.php');
+//require('authenticate.php');
+
+
+$id = 0;
+if (isset($_GET['id'])) {
+    $id = $_GET['id'];
+}
+
+function filteredData()
+{
+    if (filter_input(INPUT_GET, 'id', FILTER_VALIDATE_INT) === 0) {
+        return true;
+    } else {
+        return filter_input(INPUT_GET, 'id', FILTER_VALIDATE_INT);
+    }
+}
+
+if (filteredData()) {
+    // SQL is written as a String.
+    $query = "SELECT * FROM content_post WHERE post_id = $id";
+
+    // A PDO::Statement is prepared from the query.
+    $statement = $db->prepare($query);
+
+    // Execution on the DB server is delayed until we execute().
+    $statement->execute();
+
+    $blogData = $statement->fetch();
+}
+?>
+
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <link rel="stylesheet" href="main.css">
+    <title>Edit this Post!</title>
+</head>
+
+<body>
+    <!-- Remember that alternative syntax is good and html inside php is bad -->
+    <div id="wrapper">
+        <div id="header">
+            <h1><a href="index.php">Kelvin's Blog- Edit Post</a></h1>
+        </div>
+        <ul class="menu">
+            <li><a href="index.php">Home</a></li>
+            <li><a href="create.php">New Post</a></li>
+        </ul>
+        <div id="all_blogs">
+            <form action="post.php" method="post">
+                <fieldset>
+                    <legend>Edit Blog Post</legend>
+                    <p>
+                        <label for="title">Title</label>
+                        <input name="title" id="title" value="<?= $blogData['title']?>" >
+                    </p>
+                    <p>
+                        <label for="content">Content</label>
+                        <textarea name="content" id="content"><?= $blogData['content'] ?></textarea>
+                    </p>
+                    <p>
+                        <input type="hidden" name="id" value=<?= $id ?> >
+                        <input type="submit" name="update" value="Update" >
+                        <input type="submit" name="delete" value="Delete"
+                            onclick="return confirm('Are you sure you wish to delete this post?')" >
+                    </p>
+                </fieldset>
+            </form>
+        </div>
+        <div id="footer">
+            Copywrong 2023 - No Rights Reserved
+        </div>
+    </div>
+</body>
+
+</html>
diff --git a/index.php b/index.php
@@ -60,7 +60,7 @@
                                 </p>
                             </div>
                             <?php if (strlen($row['content']) >= 200): {
-                                $content = mb_substr($row['content'], 0, 200) . "<a href='display.php?id=" . $row['pos_id'] . "'>Read Full Post</a>";
+                                $content = mb_substr($row['content'], 0, 200) . "<a href='display.php?id=" . $row['post_id'] . "'>Read Full Post</a>";
                             }
                             ?>
                             <?php else: ?>

diff --git a/post.php b/post.php
@@ -7,6 +7,7 @@
 ****************/
 
 require('connect.php');
+session_start();
 
 if (
     $_POST && !empty($_POST['title']) && strlen($_POST['title']) >= 1 &&
@@ -16,12 +17,15 @@
         //  Sanitize user input to escape HTML entities and filter out dangerous characters.
         $title = filter_input(INPUT_POST, 'title', FILTER_SANITIZE_STRIPPED);
         $content = filter_input(INPUT_POST, 'content', FILTER_SANITIZE_STRIPPED);
+        $poster_id = $_SESSION['user_id'];
+        //log($_SESSION['user_id']);
 
         //  Build the parameterized SQL query and bind to the above sanitized values.
-        $query = "INSERT INTO content_post (title, content) VALUES (:title, :content)";
+        $query = "INSERT INTO content_post (poster_id, title, content) VALUES (:poster_id, :title, :content)";
         $statement = $db->prepare($query);
 
         //  Bind values to the parameters
+        $statement->bindValue(":poster_id",$poster_id);
         $statement->bindValue(":title", $title);
         $statement->bindValue(":content", $content);
 
@@ -35,7 +39,7 @@
         //  Sanitize user input to escape HTML entities and filter out dangerous characters.
         $title = filter_input(INPUT_POST, 'title', FILTER_SANITIZE_STRIPPED);
         $content = filter_input(INPUT_POST, 'content', FILTER_SANITIZE_STRIPPED);
-        $id = filter_input(INPUT_POST, 'post_id', FILTER_VALIDATE_INT);
+        $post_id = filter_input(INPUT_POST, 'id', FILTER_VALIDATE_INT);
 
         //  Build the parameterized SQL query and bind to the above sanitized values.
         //$query = "UPDATE content_post SET title=$title, content=$content WHERE id=$id";
@@ -45,7 +49,7 @@
         //  Bind values to the parameters
         $statement->bindValue(":title", $title);
         $statement->bindValue(":content", $content);
-        $statement->bindValue(":post_d", $post_id);
+        $statement->bindValue(":post_id", $post_id);
 
         //  Execute the UPDATE.
         //  execute() will check for possible SQL injection and remove if necessary
@@ -56,14 +60,14 @@
 
     } else if (isset($_POST['delete'])) {
         //  Sanitize user input to escape HTML entities and filter out dangerous characters.
-        $id = filter_input(INPUT_POST, 'post_id', FILTER_VALIDATE_INT);
+        $post_id = filter_input(INPUT_POST, 'id', FILTER_VALIDATE_INT);
 
         //  Build the parameterized SQL query and bind to the above sanitized values.";
         $query = "DELETE FROM content_post WHERE post_id = :post_id";
         $statement = $db->prepare($query);
 
         //  Bind values to the parameters
-        $statement->bindParam(":;post_id", $post_id);
+        $statement->bindParam(":post_id", $post_id);
 
         //  Execute the DELETE.
         //  execute() will check for possible SQL injection and remove if necessary

diff --git a/tinymce/icons/default/icons.min.js b/tinymce/icons/default/icons.min.js
diff --git a/tinymce/langs/README.md b/tinymce/langs/README.md
@@ -0,0 +1,3 @@
+This is where language files should be placed.
+
+Please DO NOT translate these directly use this service: https://www.transifex.com/projects/p/tinymce/
diff --git a/tinymce/license.txt b/tinymce/license.txt
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 Ephox Corporation DBA Tiny Technologies, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/tinymce/models/dom/model.min.js b/tinymce/models/dom/model.min.js
diff --git a/tinymce/plugins/advlist/plugin.min.js b/tinymce/plugins/advlist/plugin.min.js
diff --git a/tinymce/plugins/anchor/plugin.min.js b/tinymce/plugins/anchor/plugin.min.js
diff --git a/tinymce/plugins/autolink/plugin.min.js b/tinymce/plugins/autolink/plugin.min.js
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		This is where language files should be placed.

		Please DO NOT translate these directly use this service: https://www.transifex.com/projects/p/tinymce/