sidebar.php

<?php // sidebar.php

 echo "<div id=\"sidebar\">\n";

isset($_GET['action']) ? $action = clean_it($_GET['action']) : $action = '';    // Variable definieren

if(isset($_POST['submit_login'])){

    $log_user = clean_it($_POST['log_user']);   // Variable definieren
    $log_pass = clean_it($_POST['log_pass']);   // Variable definieren => MD5 Verschluesselung

    $login = mysql_query("SELECT id FROM user WHERE name='$log_user' AND passwort='$log_pass'");

    if(mysql_num_rows($login) > 0){ // korrekt eingeloggt

            $row = mysql_fetch_object($login); // DATEN aus DB

            $_SESSION['login'] = $row->id; // Session zuweisen
            $_SESSION['user'] = $log_user; // Session zuweisen

            header("Location: admin.php"); // Weiterleitung

    }else{
        echo get_error(' Logindaten fehlerhaft ...');
    }
}

//--------------------------------------------------------
// Wenn Eingeloggt
//--------------------------------------------------------

if(isset($_SESSION['login'])){

 echo "<h2>Welcome ".$_SESSION['user']."<small>";
 echo "<a href=\"?action=logout\">Logout</a></small></h2>";

 echo "<p><a href=\"post_news.php\" class=\"the_button\">Neuen Artikel verfassen</a></p>";

 echo "<br />";

//--------------------------------------------------------
// Letzte Kommentare
//--------------------------------------------------------

 echo "<h2>Neusten Kommentare</h2>\n";

 $new_comi = mysql_query("SELECT id, name, comment, DATE_FORMAT(date, '%d.%m.%Y') AS datum FROM comments ORDER BY id DESC LIMIT 3");

 if(mysql_num_rows($new_comi)<1){

    echo "<p>Derzeit existieren keine Kommentare...</p>";
 }

 echo "<ul class=\"list\">";

 // News ausgeben ausgeben
while($row_c = mysql_fetch_object($new_comi)){

    echo "<li><strong>".$row_c->id.".</strong>";
    echo substr($row_c->comment, 0, 80)." [..] <br />\n";

    echo "<div class=\"right\">\n";
    echo "<a href=\"edit_comments.php?id=".$row_c->id."\">Bearbeiten</a>  \n";
    echo "<a href=\"edit_comments.php?action=loeschen&amp;id=".$row_c->id."\">[x]</a>\n";
    echo "</div>\n ";

    echo "<small>".$row_c->name." &#xBB; <span class=\"green\">".$row_c->datum."</span></small>\n";
    echo "</li>\n";

} // close while

echo "</ul>";


//--------------------------------------------------------
// Logout
//--------------------------------------------------------

if($action == 'logout'){
    session_unset();            // Sessionvariable loeschen
    session_destroy();          // Session zerstoeren

    header("Location: admin.php"); // Weiterleitung
}

}else{
?>

<form action="" method="post">
    <fieldset>
    <legend><span class="blue">Grafixx</span> Login</legend>
        <label>Name</label>
        <input type="text" name="log_user" /><br />

        <label>Passwort</label>
        <input type="password" name="log_pass" />
        <br /><br />

        <input type="submit" value="Login" name="submit_login" class="button"/>
    </fieldset>
</form>
<?php } /* Close login */ ?>

        </div>
    </div>