mwadmin/removewiki.php at main · harryajc/mwadmin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
<?php
// This allows a user to delete a wiki on the platform.
// PLEASE NOTE: This page is not completed yet.
// Initialize the session
session_start();

// Check if the user is logged in, if not then redirect to login page
if(!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true){
    header("location: login.php");
    exit;
}

// Include config file
require_once "config.php";

// Pull the information from the database
$sql = "SELECT * FROM wikis";
$stmt = mysqli_prepare($link, $sql);

mysqli_stmt_execute($stmt);

$result = mysqli_stmt_get_result($stmt);

$selected_id = "";

// Processing form data when form is submitted
if($_SERVER["REQUEST_METHOD"] == "POST"){
	if($_POST["selected_id"] === "Select one wiki to delete"){
		$selected_id_err = "Please select a valid option";
	} else {
		$selected_id = trim($_POST["selected_id"]);
		// Pull folder location for selected wiki
		while($row = mysqli_fetch_array($result)){
			if($selected_id == $row['id']){
				$wiki_dir = $row['wikifolder'];
				$wiki_local = $row['wikilocal'];
				$db_name = $row['dbname'];
			}
		}
		echo $wiki_dir;
		echo $wiki_local;
		// Delete files and folder
		echo shell_exec("rm {$wiki_dir}/api.php");
		echo shell_exec("rm {$wiki_dir}/autoload.php");
		echo shell_exec("rm {$wiki_dir}/CODE_OF_CONDUCT.md");
		echo shell_exec("rm {$wiki_dir}/composer.json");
		echo shell_exec("rm {$wiki_dir}/composer.lock");
		echo shell_exec("rm {$wiki_dir}/COPYING");
		echo shell_exec("rm {$wiki_dir}/CRDITS");
		echo shell_exec("rm {$wiki_dir}/docs");
		echo shell_exec("rm {$wiki_dir}/extensions");
		echo shell_exec("rm {$wiki_dir}/FAQ");
		echo shell_exec("rm {$wiki_dir}/HISTORY");
		echo shell_exec("rm {$wiki_dir}/img_auth.php");
		echo shell_exec("rm {$wiki_dir}/includes");
		echo shell_exec("rm {$wiki_dir}/index.php");
		echo shell_exec("rm {$wiki_dir}/INSTALL");
		echo shell_exec("rm {$wiki_dir}/jsduck.json");
		echo shell_exec("rm {$wiki_dir}/languages");
		echo shell_exec("rm {$wiki_dir}/load.php");
		echo shell_exec("rm {$wiki_dir}/LocalSettings.php");
		echo shell_exec("rm {$wiki_dir}/maintenance");
		echo shell_exec("rm {$wiki_dir}/mw-config");
		echo shell_exec("rm {$wiki_dir}/opensearch_desc.php");
		echo shell_exec("rm {$wiki_dir}/README.md");
		echo shell_exec("rm {$wiki_dir}/RELEASE-NOTES-1.35");
		echo shell_exec("rm {$wiki_dir}/resources");
		echo shell_exec("rm {$wiki_dir}/rest.php");
		echo shell_exec("rm {$wiki_dir}/SECURITY");
		echo shell_exec("rm {$wiki_dir}/skins");
		echo shell_exec("rm {$wiki_dir}/tests");
		echo shell_exec("rm {$wiki_dir}/thumb_handler.php");
		echo shell_exec("rm {$wiki_dir}/thumb.php");
		echo shell_exec("rm {$wiki_dir}/UPGRADE");
		echo shell_exec("rm {$wiki_dir}/vendor");
		echo shell_exec("rm {$wiki_dir}/cache/ -r");
		echo shell_exec("rm {$wiki_dir}/images/ -r");
		echo shell_exec("rm {$wiki_local}");
		echo shell_exec("rmdir {$wiki_dir}");

		// Delete mysql database
		echo shell_exec("mysql --user='root' --password='{$mysql_password}' --execute='REMOVE DATABASE {$db_name};'");

		// Remove wiki from mwadmin db
		$sql = "DELETE FROM wikis WHERE id = ?";
		if($stmt = mysqli_prepare($link, $sql)){
			// Bind variables to the prepared statement as parameters
			mysqli_stmt_bind_param($stmt, "s", $selected_id);

			// Attempt to execute the prepard statement
			if(mysqli_stmt_execute($stmt)){
				header("location: welcome.php"); // Redirect back to welcome page
			} else{
				echo "Oops! The wiki wasn't removed from the database.";
			}

			// Close statement
			mysqli_close($link);
		}
		// Remove wiki from the Global LocalSettings.php file

	}

}
?>

<!DOCTYPE html>
<?php include_once("menu.php");?>
<html lang="en">
<head>
    <title>Delete Wiki - MWAdmin</title>
</head>
<body>
	<div class="content">
		<h2>Delete a wiki below</h2>
		<p style="color: red">Please Note this is not reversable! All images and data will be distroyed!</p>
		<p>Please select the wiki you wish to delete</p>
		<form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method="post">
			<select name="selected_id" id="selected_id" class="form-control">
				<option selected="selected" >Select one wiki to delete</option>
				<?php
				while($row = mysqli_fetch_array($result)){
					$id = $row['id'];
					$wikiname = $row['wikiname'];
					echo "<option value='$id'>$wikiname</option>";
				}
				?>
			</select>
			<input type="submit" class="btn btn-primary" value="Submit">
		</form>
		<?php
		mysqli_stmt_close($stmt);
		mysqli_close($link); ?>
	</div>
</body>
</html>