- adds a panel for administrating vendors
- removed corresponding TODO entry
This commit is contained in:
85
admin/adminVendors.php
Normal file
85
admin/adminVendors.php
Normal file
@@ -0,0 +1,85 @@
|
||||
<?php
|
||||
/*************************************************************/
|
||||
/* code to view and maintain the list of application vendors */
|
||||
/*************************************************************/
|
||||
|
||||
/*
|
||||
* application environment
|
||||
*/
|
||||
include("path.php");
|
||||
require(BASE."include/incl.php");
|
||||
|
||||
//deny access if not logged in
|
||||
if(!loggedin())
|
||||
{
|
||||
errorpage("You need to be logged in to use this page.");
|
||||
exit;
|
||||
} else if(!havepriv("admin"))
|
||||
{
|
||||
errorpage("You must be an administrator to use this page.");
|
||||
exit;
|
||||
}
|
||||
|
||||
apidb_header("Admin Vendors");
|
||||
echo '<form name="qform" action="adminVendors.php" method="post" enctype="multipart/form-data">',"\n";
|
||||
|
||||
if ($_REQUEST['sub'])
|
||||
{
|
||||
if($_REQUEST['sub'] == 'delete')
|
||||
{
|
||||
$sQuery = "DELETE FROM vendor WHERE vendorId = ".$_REQUEST['vendorId'].";";
|
||||
echo "$sQuery";
|
||||
$hResult = query_appdb($sQuery);
|
||||
echo html_frame_start("Delete vendor: ".$_REQUEST['vendorId'],400,"",0);
|
||||
if($hResult)
|
||||
{
|
||||
//success
|
||||
echo "<p>Vendor was successfully deleted</p>\n";
|
||||
}
|
||||
echo html_frame_end(" ");
|
||||
echo html_back_link(1,'adminVendors.php');
|
||||
}
|
||||
} else
|
||||
{
|
||||
//get available vendors
|
||||
$sQuery = "SELECT * from vendor;";
|
||||
$hResult = query_appdb($sQuery);
|
||||
|
||||
if(!$hResult || !mysql_num_rows($hResult))
|
||||
{
|
||||
// no vendors
|
||||
echo html_frame_start("","90%");
|
||||
echo '<p><b>There are no application vendors.</b></p>',"\n";
|
||||
echo html_frame_end(" ");
|
||||
}
|
||||
else
|
||||
{
|
||||
// show vendorlist
|
||||
echo html_frame_start("","90%","",0);
|
||||
echo "<table width='100%' border=0 cellpadding=3 cellspacing=0>\n\n";
|
||||
|
||||
echo "<tr class=color4>\n";
|
||||
echo " <td><font color=white>Vendor name</font></td>\n";
|
||||
echo " <td><font color=white>Vendor url</font></td>\n";
|
||||
echo " <td> </td>\n";
|
||||
echo "</tr>\n\n";
|
||||
|
||||
$c = 1;
|
||||
while($ob = mysql_fetch_object($hResult))
|
||||
{
|
||||
if ($c % 2 == 1) { $bgcolor = 'color0'; } else { $bgcolor = 'color1'; }
|
||||
echo "<tr class=$bgcolor>\n";
|
||||
echo " <td>".$ob->vendorName."</td>\n";
|
||||
echo " <td><a href=\"".$ob->vendorURL."\">".$ob->vendorURL."</a></td>\n";
|
||||
echo " <td>[<a href='adminVendors.php?sub=delete&vendorId=$ob->vendorId'>delete</a>]</td>\n";
|
||||
echo "</tr>\n\n";
|
||||
$c++;
|
||||
}
|
||||
echo "</table>\n\n";
|
||||
echo html_frame_end(" ");
|
||||
}
|
||||
}
|
||||
|
||||
echo "</form>";
|
||||
apidb_footer();
|
||||
?>
|
||||
Reference in New Issue
Block a user