Untitled

<?php
/*
* Tracker Suite v0.1
* Requires: PHP & MySQL
* ---------
* Most hosting providers will usually say if they have PHP or not.
* If you want to locally host it, I recommend LAMP for Linux, or Xampp for winblows.
*
*/

/* README
* The user and password you define below shouldn't already exist. These will be created.
* You will be prompted once to provide a username and password that can create a user
* and delegate privileges.
*/

// MySQL defines:
$SQL_HOSTNAME = "localhost";
$SQL_DBNAME = "tracker102";
$SQL_USER = "tracker102";
$SQL_PASS = "lawlerbawler1039";


// Functions

function check_for_db($_host,$_user,$_pass,$_dbname) {
    $link = mysqli_connect($_host,$_user,$_pass,$_dbname);
    if(!$link) {
        echo "<div class='track_error'>MySQL connect error (" . mysqli_connect_errno() . ") : " . mysqli_connect_error() . ".</div></br></br>";
        return mysqli_connect_errno();
    }
    else {
        return 0;
    }
}

function tracker_setup() {
    if ( isset($_POST['_sqluser']) && isset($_POST['_sqlpass']) && isset($_POST['_sqlhost']) ) {
        $setuplink = mysqli_connect($_POST['_sqlhost'], $_POST['_sqluser'], $_POST['_sqlpass']);
        if ( !$setuplink ) {
            echo "<div class='track_error'>MySQL connect error (" . mysqli_connect_errno() . ") : " . mysqli_connect_error() . ".</br></br>";
            echo "<b>Press the back button and please correct the error.</b></br>";
            return mysqli_connect_errno();
        }
        echo "Attempting to create user and database now...";

    }
    else {
        echo "
        <b>Please enter existing account details that can setup a database, create users, and delegate privileges.</br>
        This will use a personal account only once to create a user and a database just for interacting with software and the databases it creates.</br>
        </b>
        *Make sure you change your MySQL defines in the source code before doing this.</br></br>
        <form action='' method='POST'>
        Username <input type='text' name='_sqluser' /></br>
        Password <input type='password' name='_sqlpass' /></br>
        Hostname <input type='text' name='_sqlhost' /></br>
        <input type='submit' />
        </form>
        ";
    }
}

?>

<html>
<head>
<title>Tracker Suite</title>
<style>
html, body {
    margin:0;
    padding:0;
}

body {

}

header {
    display:block;
    padding:1%;
    text-align:center;
    font-size: 2em;
    font-weight:bold;
    border-bottom:2px double black;
}

nav {
    display:block;
    padding:0.2%;
    font-size:1.1em;
    border-bottom:2px double black;
}

.nav_button {
    padding-right:4%;
    padding-left:4%;
    margin-right:0.1%;
    margin-left:0.1%;
    background-color:blue;
    color:black;
    border:1px solid black;
    text-decoration:none;
}

.nav_button:hover {
    background-color:gray;
    text-decoration:underline;
}

article {
    margin:0.5%;
    padding:0.5%;
    height:80%;
    border:2px double black;

}

footer {
    position:absolute;
    width:100%;
    bottom:0;
    left:0;
    text-align:center;
    font-size:12px;
    background-color:gray;
    border-top:1px solid black;
}

.nav_button, article {
        /* Firefox Curved Borders */
    -moz-border-radius:3px;
        /* Chrome Curved Borders */
    border-radius:3px;
}

.track_error {
    display: block;
    padding: 0.5%;
    width: 100%;
    background-color:black;
    color:red;
    font-weight:bold;
    font-size:16px;
    border-bottom:1px solid black;
    text-align: center;
}
</style>
</head>
<body>
    <header>Tracker Suite</header>
    <nav><a class="nav_button" href="?action=new">New</a><a class="nav_button" href="?action=load">Load</a></nav>
    <article>
    <?php
        $x = check_for_db($SQL_HOSTNAME, $SQL_USER, $SQL_PASS, $SQL_DBNAME);
        if( $x != 0 ) {
            // If it is a permission error, then that account is most likely not set up.
            if ( $x == 1045 || $x == 1046 ) {
                tracker_setup();
                if ( $x == 1049 ) {
                    echo "Cannot find the database, attempting to create one...</br>"; // EDIT HERE
                    // try to login and create a new database.
                }
            }
            else {
                // I have no idea what happened, so let them fix it / deal with it. :)
                die("Please address the error above.");
            }
        }
        if($_GET['action'] == "new") {
            // load a creation form
        }
        elseif($_GET['action'] == "load") {
            // load a selection
        }
    ?>
    </article>
    <footer>Tracker Suite || Code and design by Machiavelli @ breakingsec.org</footer>
</body>
</html>