<?php
//NIEMALS AENDERN!
$con = mysqli_connect($datahost, $datauser, $datapass) or die("Fehler beim Verbinden zum MySQL Server");
mysqli_select_db($con, $database) or die("Fehler beim Verbinden zur MySQL Database");
date_default_timezone_set("Europe/Berlin");
$timestamp = time();
$datum = date("d.m.Y",$timestamp);
$uhrzeit = date("H:i",$timestamp);
$userip = $_SERVER["REMOTE_ADDR"];

if($_GET[leeren] == "true") {
mysqli_query($con, 'DELETE FROM grussbox WHERE id != "1";');
echo '<meta http-equiv="refresh" content="1; URL=?page_id=445?p=intern&s='.$_GET[s].'">';
}
if($_GET[löschen] == "true") {
mysqli_query($con, 'DELETE FROM grussbox WHERE &grussid');
echo '<meta http-equiv="refresh" content="1; URL=?page_id=445p=intern&s='.$_GET[s].'">';
}
$gbquery = mysqli_query($con, "SELECT 1 FROM grussbox_status WHERE `status` = 'aktivieren'");
$aabrechnungen = mysqli_num_rows($gbquery);
if($aabrechnungen > 0) {$grussbox = "1";}  else {$grussbox = "0";}
if($_GET[status] != "" OR $_GET[scstatus] != "") {echo '<meta http-equiv="refresh" content="0; URL=?page_id=445?p=intern&s='.$_GET[s].'">';}
if($_GET[farbe]) {$einstellungenupdaten = "UPDATE grussbox SET farbe = '$_GET[farbe]' WHERE id = '$_GET[grussid]'";
$loesch = mysqli_query($con, $einstellungenupdaten);}
if($_GET[status]) {$statusupdaten = "UPDATE grussbox_status SET status = '$_GET[status]' WHERE id = '1'";
$lstatusoesch = mysqli_query($con, $statusupdaten);}


$sql = "SELECT * FROM grussbox ORDER BY id";
$db_erg = mysqli_query( $con, $sql );
echo '
<ul class="nav nav-pills">
  <li class="nav-item active">
    <a href="?page_id=445?p=intern&s='.$_GET[s].'&leeren=true" class="nav-link">Grussbox leeren</a>
  </li>
  <li class="nav-item  active">
    <a class="nav-link" href="?page_id=445?p=intern&s='.$_GET[s].'&status=deaktivieren">Grußbox deaktivieren</a>
  </li>
  <li class="nav-item  active">
    <a class="nav-link" href="?page_id=445?p=intern&s='.$_GET[s].'&status=aktivieren">Grußbox aktivieren</a>
  </li>
</ul><br>


';
while ($zeile = mysqli_fetch_array( $db_erg, MYSQL_ASSOC))
{
echo '
';
if($zeile[farbe] != "" AND $zeile[farbe] != "weiss") {echo '<div class="card card-inverse card-'.$zeile[farbe].' mb-3">';} else {echo '<div class="card mb-3">';}
echo '
  <div class="card-block">
    <h4 class="card-title">'.$zeile[username].' - '.$zeile[timestamp].'</h4>
    <h6 class="card-subtitle mb-2 text-muted">'.$zeile[kategorie].'</h6>
    <p class="card-text">'.$zeile[text].'</p>
    <a href="?page_id=445?p=intern&s='.$_GET[s].'&grussid='.$zeile[id].'&farbe=success" class="card-link"><span class="badge badge-success">&emsp;</span></a>
    <a href="?page_id=445?p=intern&s='.$_GET[s].'&grussid='.$zeile[id].'&leeren=true">löschen</a>
    <a href="?page_id=445?p=intern&s='.$_GET[s].'&&bannen='.$zeile[ip].'" class="card-link" style="float:right;"><span class="badge badge-default">Bannen</span></a>
  </div>
</div>
';
}
mysqli_free_result( $db_erg );

if($_GET[bannen] != "") {
$abrechnen = "INSERT INTO banlist (ip) VALUES ('$_GET[bannen]')";
$eintragen = mysqli_query($con, $abrechnen);
}
?>