wikiStax/createuseragreement.php at main · dafogary/wikiStax · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
<?php
// This allows a user to create a wiki on the platform.
// Initialize the session
session_start();

// Check if the user is logged in, if not then redirect to login page
if(!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true){
    header("location: login.php");
    exit;
}

// Include config file
require_once "config.php";

// Define variables and initialize with empty values
$db_name = $wiki_name = "";
$db_name_err = $wiki_name_err = "";

// Processing form data when form is submitted
if($_SERVER["REQUEST_METHOD"] == "POST"){

	// Validate Database name
	if(empty(trim($_POST["db_name"]))){
		$db_name_err = "Please enter a Database Name.";
	} elseif(strpos(trim($_POST["db_name"]),' ') !== false) {
		$db_name_err = "Database name cannot contain spaces.";
	} else{
		$db_name = strtolower(trim($_POST["db_name"]));
	}

	// Validate Wiki Name
	if(empty(trim($_POST["wiki_name"]))){
		$wiki_name_err = "Please enter a wiki name.";
	} else{
		$wiki_name = trim($_POST["wiki_name"]);
	}

	// Validate database username
	if(empty(trim($_POST["db_username"]))){
		$db_username_err = "Please enter a Database Username.";
	} else{
		$db_username = trim($_POST["db_username"]);
	}
	// Validate database password
	if(empty(trim($_POST["db_password"]))){
		$db_password_err = "Please enter a Database Password.";
	} else{
		$db_password = trim($_POST["db_password"]);
	}
	if(empty(trim($_POST["wiki_name"]))){
		$wiki_name_err = "Please enter a wiki name.";
	} else{
		$wiki_name = trim($_POST["wiki_name"]);
	}

		// Check input errors before performing tasks
	if(empty($db_name_err) && empty($wiki_name_err) && empty($db_username_err) && empty($db_password_err)){

		// Create required variables
		$useragreementfile = "$mwadmin/useragreement/{$db_name}/useragreement.php";
		$downloadfile = "$mwadmin/useragreement/{$db_name}/download.php";

		// Create the directory for the user agreement
		$useragreement_dir = "$mwadmin/useragreement/{$db_name}/";
		if (!is_dir($useragreement_dir)) {
			if (!mkdir($useragreement_dir, 0755, true)) {
				die("ERROR: Failed to create directory $useragreement_dir");
			}
		}

		// Copy the useragreement.php file to the new directory
		if (!copy("$mwadmin/config/useragreement.php", $useragreementfile)) {
			die("ERROR: Failed to copy useragreement.php to $useragreementfile");
		}

		// Copy the download.php file to the new directory
		if (!copy("$mwadmin/config/download.php", $downloadfile)) {
			die("ERROR: Failed to copy download.php to $downloadfile");
		}

		// Perform tasks to create the useragreement.php file for the wiki
		$local = file_get_contents($useragreementfile);
		$local = str_replace("wikidbname", $db_name, $local);
		$local = str_replace("wikiname", $wiki_name, $local);
		$local = str_replace("dbuser", $db_username, $local);
		$local = str_replace("password", $db_password, $local);
		if (file_put_contents($useragreementfile, $local) === false) {
			die("ERROR: Failed to write to $useragreementfile");
		}


			// Attempt to execute the prepared statement
				header("location: welcome.php"); // Redirect back to welcome page once wiki creation is complete.
			} else{
				echo "Oops! The wiki wasn't added to the database.";
			}

			// Close statement
			mysqli_close($link);

	}

?>
<!DOCTYPE html>
<?php include_once("menu.php");?>
<html lang="en">
<head>
    <title>Create Wiki - Useragreement page - WikiStax</title>
</head>
<body>
	<div class="content">
		<h2>Create a useragreement acceptance page below</h2>
		<p><span class="warning">This page is to be only used by Wiki SysAdmins.</span></p>
		<p>Please fill this form to create a new useragreement acceptance page.</p>
		<div class="wrapper">
			<form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method="post">
				<div class="form-group">
					<label>Database Name for the Wiki in question</label>
					<input type="text" name="db_name" class="form-control <?php echo (!empty($db_name_err)) ? 'is-invalid' : ''; ?>" value="<?php echo $db_name; ?>">
					<span class="invalid-feedback"><?php echo $db_name_err; ?></span>
				</div>
				<div class="form-group">
					<label>Database Username for the Wiki in question</label>
					<input type="text" name="db_username" class="form-control <?php echo (!empty($db_username_err)) ? 'is-invalid' : ''; ?>" value="<?php echo $db_name; ?>">
					<span class="invalid-feedback"><?php echo $db_username_err; ?></span>
				</div>
				<div class="form-group">
					<label>Database Password for the Wiki in question</label>
					<input type="password" name="db_password" class="form-control <?php echo (!empty($db_password_err)) ? 'is-invalid' : ''; ?>" value="<?php echo $db_name; ?>">
					<span class="invalid-feedback"><?php echo $db_password_err; ?></span>
				</div>

				<div class="form-group">
					<label>Wiki name</label>
					<input type="text" name="wiki_name" class="form-control <?php echo (!empty($wiki_name_err)) ? 'is-invalid' : ''; ?>" value="<?php echo $wiki_name; ?>">
					<span class="invalid-feedback"><?php echo $wiki_name_err; ?></span>
				</div>
				<div class="form-group">
					<input type="submit" class="btn btn-primary" value="Submit">
					<input type="reset" class="btn btn-secondary ml-2" value="Reset">
				</div>
			</form>
		</div>
	</div>
</body>
</html>
<?php include_once("footer.php");?>