Helloworld/manage_contests.php at master · Goldiedaang/Helloworld · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
<?php
session_start();
include("Assets/php/dbconfig.php");
function alert($msg) {
    echo "<script type='text/javascript'>alert('$msg');</script>";
}
function check_pass($i,$dbconfig,$password){
	$password=crypt($password, '$2a$07$CCSCodersUnderSiegelul$');
	$query=$dbconfig->prepare("SELECT * from {$i}_login where email=? and password=?");
	$query->bind_param("ss",$_SESSION['email'],$password);
	$query->execute();
	$query=$query->get_result();
	return $query->num_rows;
}


if(!isset($_SESSION['email'])||$_SESSION['admin']!=1)
header("location:admin.php");
elseif($_SERVER['REQUEST_METHOD']=="POST")
{
	$id=$_SESSION['uid'];
	$cid=mysqli_real_escape_string($dbconfig,$_POST['submit']);
	$result=$dbconfig->prepare("DROP TABLE admin_{$id}_{$cid}_pre,admin_{$id}_{$cid}_res,admin_{$id}_{$cid}_response");
	$result->execute();
	$result=$dbconfig->prepare("DELETE FROM all_contests where contestid=?");
	$result->bind_param("i",$cid);
	$result->execute();
	$result=$dbconfig->prepare("DELETE FROM moderators where contestid=?");
	$result->bind_param("i",$cid);
	$result->execute();
	alert("Contest Deleted Successfully");
}
?>
<html>
<head>
<meta charset="utf-8">
<title>Creative Computing Society</title>
	<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.2.1/css/bootstrap.min.css" integrity="sha384-GJzZqFGwb1QTTN6wy59ffF1BuGJpLSa9DkKMp0DgiMDm4iYMj70gZWKYbI706tWS" crossorigin="anonymous">
	<script src="https://code.jquery.com/jquery-3.3.1.slim.min.js" integrity="sha384-q8i/X+965DzO0rT7abK41JStQIAqVgRVzpbzo5smXKp4YfRvH+8abtTE1Pi6jizo" crossorigin="anonymous"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.6/umd/popper.min.js" integrity="sha384-wHAiFfRlMFy6i5SRaxvfOCifBUQy1xHdJ/yoi7FRNXMRBu5WHdZYu1hA6ZOblgut" crossorigin="anonymous"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.2.1/js/bootstrap.min.js" integrity="sha384-B0UglyR+jN6CkvvICOB2joaf5I4l3gm9GU6Hc1og6Ls7i6U/mkkaduKaBhlAXv9k" crossorigin="anonymous"></script>
	<link rel="stylesheet" href="Assets/css/bootstrap-datetimepicker.min.css">
	<script defer src="https://use.fontawesome.com/releases/v5.7.1/js/all.js" integrity="sha384-eVEQC9zshBn0rFj4+TU78eNA19HMNigMviK/PU/FFjLXqa/GKPgX58rvt5Z8PLs7" crossorigin="anonymous"></script>
	<script src="Assets/js/bootstrap-datetimepicker.js" type="text/javascript"></script>
	<script type="text/javascript">
	function srvTime(){
    try {
        //FF, Opera, Safari, Chrome
        xmlHttp = new XMLHttpRequest();
    }
    catch (err1) {
        //IE
        try {
            xmlHttp = new ActiveXObject('Msxml2.XMLHTTP');
        }
        catch (err2) {
            try {
                xmlHttp = new ActiveXObject('Microsoft.XMLHTTP');
            }
            catch (eerr3) {
                //AJAX not supported, use CPU time.
                alert("AJAX not supported");
            }
        }
    }
    xmlHttp.open('HEAD',window.location.href.toString(),false);
    xmlHttp.setRequestHeader("Content-Type", "text/html");
    xmlHttp.send('');
    return xmlHttp.getResponseHeader("Date");
}</script>
</head>

<body>
	<nav class="navbar display-fixed navbar-toggleable-md navbar-inverse navbar-dark bg-dark text-white navbar-expand-lg">
  <a class="navbar-brand">HelloWorld</a>

   <div class="collapse navbar-collapse" id="navbarSupportedContent">
	   <ul class="navbar-nav mr-auto">
	   <li class="nav-item">
        <a class="nav-link" href="dashboard.php">Home <span class="sr-only">(current)</span></a>
      </li>
		   <?php
		   if($_SESSION['user']==1)
		   { echo '
      <li class="nav-item">
        <a class="nav-link" href="attempted_contests.php">Attempted Contests</a>
      </li>';}
		   if($_SESSION['admin']==1)
		   { echo '
      <li class="nav-item">
        <a class="nav-link" href="create_contest.php">Create Contest</a>
      </li><li class="nav-item active">
        <a class="nav-link" href="manage_contests.php">Manage Contests</a>
      </li>';}
		   ?></ul>
    <ul class="navbar-nav ml-auto">
      <li class="nav-item dropdown hidden-md-down">
        <a class="nav-link dropdown-toggle" href="#" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
          <?php echo $_SESSION['name'] ?>
        </a>
        <div class="dropdown-menu position-absolute dropdown-menu-right text-right" aria-labelledby="navbarDropdown">
          <a class="dropdown-item" href="account.php">Account</a>
          <a class="dropdown-item" href="notification.php">Notifications</a>
          <div class="dropdown-divider"></div>
          <a class="dropdown-item" href="logout.php">Logout</a>
        </div>
      </li>
	  </ul>
    </div>
		</nav><br><br><br>

	<div class="row"><div class="col-sm-1"></div><h1 class="display-4">Manage Contests</h1></div><br><div class="row"><div class="col-sm-1"></div><h3><small class="text-muted">Administrated Contests</small></h3></div><br>
	<div class="row"><div class="col-sm-1"></div><div class="col-sm-6 font-weight-bolder">Contest Name</div><div class="col-sm-5 font-weight-bolder">Action</div></div>
	<?php
	$result=$dbconfig->prepare("SELECT name,contestid from all_contests where userid=?");
	$result->bind_param("i",$_SESSION['uid']);
	$result->execute();
			$result=$result->get_result();
			while ($row1 = $result->fetch_assoc()){

    $row[] = $row1;

}
			$count=$result->num_rows;
			if($count==0)
				echo '<br>
<div class="row"><div class="col-sm-1"></div><div class="col-sm-6">No contests created.</div></div>';

			else{

			foreach($row as $contest)
			{
				echo'<br>
<div class="row"><div class="col-sm-1"></div><div class="col-sm-6">'.$contest['name'].'</div><div class="col-sm-5"><div class="btn-group" role="group" aria-label="Basic example"><form method="post" action="edit_contest.php"> <button type="submit" class="btn btn-dark" name="submit" value="'.$contest['contestid'].'">Edit</button></form><form method="post" action="manage_contests.php"> <button type="submit" class="btn btn-dark" name="submit" value="'.$contest['contestid'].'">Delete</button></form></div></div></div>';
			}}
	?>
	<br><div class="row"><div class="col-sm-1"></div><h3><small class="text-muted">Moderated Contests</small></h3></div><br>
	<div class="row"><div class="col-sm-1"></div><div class="col-sm-6 font-weight-bolder">Contest Name</div><div class="col-sm-5 font-weight-bolder">Action</div></div>
	<?php
	$result="SELECT name,all_contests.contestid from all_contests,moderators where moderators.userid=? and moderators.contestid=all_contests.contestid";
	$query=$dbconfig->prepare($result);
	$query->bind_param("i",$_SESSION['uid']);
	$query->execute();
	$query=$query->get_result();
			while ($row1 = $query->fetch_assoc()){

    $row[] = $row1;
			}
			$count=mysqli_num_rows($query);
			if($count==0)
				echo '<br>
<div class="row"><div class="col-sm-1"></div><div class="col-sm-6">No contests moderated.</div></div>';

			else{

			foreach($row as $contest)
			{
				echo'<br>
<div class="row"><div class="col-sm-1"></div><div class="col-sm-6">'.$contest['name'].'</div><div class="col-sm-5"><div class="btn-group" role="group" aria-label="Basic example"><form method="post" action="edit_contest.php"> <button type="submit" class="btn btn-dark" name="submit" value="'.$contest['contestid'].'">Edit</button></form></div></div></div>';
			}}
	?>
</body>
</html>