sunCMS - Selfmade - Release folgt

<?php
	function isValidUsername($str)
	{
		return preg_match('/^[a-zA-Z0-9-_]+$/', $str);
	}


	function isValidEmail($str)
	{
		return filter_var($str, FILTER_VALIDATE_EMAIL);
	}

	function isMaintenance()
	{
		if(cmsSettings("maintenance") == 1)
		{
			if(isAdminLoggedIn())
			{
				return false;
			} else {
				return true;
			}
		} else {
			return false;
		}
	}


	function getServerStatus($value)
	{
		$sql = mysql_query("SELECT * FROM server_status LIMIT 1");
		$row = mysql_fetch_object($sql);
		if($value == "users_online")
		{
			if($row->$value == 0)
			{
				return "<b>Keine</b> Mitglieder online.";
			} elseif($row->$value == 1) {
				return "<b>1</b> Mitglied online.";
			} else {
				return "<b>".$row->$value."</b> Mitglieder online.";
			}
		}
		return $row->$value;
	}

	function getDateToday()
	{
		$day = date("d", time());
		$month = date("m", time());
		switch($month)
		{
			case 1: $month = "Montag"; break;
			case 2: $month = "Dienstag"; break;
			case 3: $month = "Mittwoch"; break;
			case 4: $month = "Donnerstag"; break;
			case 5: $month = "Freitag"; break;
			case 6: $month = "Samstag"; break;
			case 7: $month = "Sonntag"; break;
		}
		return $day."."." ".$month;
	}

	function info($str)
	{
		return '<div class="alert alert-info">'.$str.'</div>';
	}


	function error($str)
	{
		return '<div class="alert alert-danger">'.$str.'</div>';
	}

	function success($str)
	{
		return '<div class="alert alert-success">'.$str.'</div>';
	}


	function protect($str)
	{
		$string = htmlspecialchars(trim($str), ENT_QUOTES);
		return $string;
	}

	function cmsSettings($value)
	{
		$sql = mysql_query("SELECT * FROM settings WHERE id='1' LIMIT 1");
		$row = mysql_fetch_object($sql);
		return $row->$value;
	}

	function isUserBanned($user)
	{
		$ban = mysql_query("SELECT * FROM bans WHERE value = '".$user."' AND bantype = 'user' or value = '".protect($_SERVER["REMOTE_ADDR"])."' AND bantype = 'ip' LIMIT 1");
		if(mysql_num_rows($ban) == 1)
		{
			$banData = mysql_fetch_assoc($ban);
			if($banData['expire'] > time())
			{
				return true;
			}
		}
		return false;
	}

	function userInfo($user, $value)
	{
		$sql = mysql_query("SELECT * FROM users WHERE username = '".$user."' LIMIT 1");
		$row = mysql_fetch_object($sql);
		return $row->$value;
	}

	function userName($id)
	{
		$sql = mysql_query("SELECT username FROM users WHERE id = '".$id."' LIMIT 1");
		$row = mysql_fetch_object($sql);
		return $row->username;
	}

	function isUserLoggedIn()
	{
		if(isset($_SESSION["login_username"]) && isset($_SESSION["login_password"]))
		{
			$sql = mysql_query("SELECT id FROM users WHERE username = '".protect($_SESSION["login_username"])."' AND password = '".protect($_SESSION["login_password"])."' LIMIT 1");
			if(mysql_num_rows($sql) == 1)
			{
				return true;
			} else {
				return false;
			}
		}
		return false;
	}

	function isAdminLoggedIn()
	{
		if(isUserLoggedIn())
		{
			if(userInfo(pString($_SESSION["login_username"]), "rank") >= 4)
			{
				return true;
			} else {
				return false;
			}
		}
		return false;
	}
?>

<?php
	ob_start();
	session_start(); 
	define("ITS_OK", true);

	include("inc/config.php");
	include("inc/functions.php");

	$p = protect($_GET['p']);
	if(empty($p))
	{
		header("Location: ./home");
	}
	if($p == "maintenance" AND isMaintenance()) define("MAINTENANCE", true);

	include("src/header.php");
	switch($p)
	{
		case "home": include("src/home.php"); break;
		case "me": include("src/me.php"); break;
		case "settings": include("src/settings.php"); break;
		case "article": include("src/article.php"); break;
		case "welcome": include("src/welcome.php"); break;
		case "maintenance": include("src/maintenance.php"); break;
		case "logout":
			session_destroy();
			header("Location: ./");
			break;
		default: include("src/home.php");
	}
	include("src/footer.php");

	if(isMaintenance() AND !defined("MAINTENANCE"))
	{
		header("Location: /maintenance");
	}
?>