admin/abuse.php

   1 <?PHP
   2 include_once('../slack.php');
   3 include_once('security.php');
   4 include_once('/var/www/secure.php'); //outside webserver
   5 if ($_COOKIE['level'] == 'user'){
   6   slack_general('ADMIN: Redirect User Home ('.$_COOKIE['name'].') ('.$_COOKIE['level'].')','md-petition');
   7   header('Location: user_home.php');
   8 }
   9 if ($_COOKIE['level'] == 'manager'){
  10   slack_general('ADMIN: Redirect Manager Home ('.$_COOKIE['name'].') ('.$_COOKIE['level'].')','md-petition');
  11   header('Location: manager_home.php');
  12 }
  13 if (isset($_GET['flag_invalid_signature'])){
  14   $id = $_GET['flag_invalid_signature'];
  15   $petition->query("update signatures set signature_status = 'flag_invalid_signature' where id = '$id' ");
  16   header('Location: abuse.php');
  17 }
  18 if (isset($_GET['flag_duplicate'])){
  19   $id = $_GET['flag_duplicate'];
  20   $petition->query("update signatures set signature_status = 'flag_duplicate' where id = '$id' ");
  21   header('Location: abuse.php');
  22 }
  23 if (isset($_GET['flag_ip_address'])){
  24   $ip = $_GET['flag_ip_address'];
  25   $petition->query("update signatures set signature_status = 'flag_ip_address' where ip_address = '$ip' ");
  26   header('Location: abuse.php');
  27 }
  28 if (isset($_GET['flag_VTRID'])){
  29   $VTRID = $_GET['flag_VTRID'];
  30   $petition->query("update signatures set signature_status = 'flag_VTRID' where VTRID = '$VTRID' ");
  31   header('Location: abuse.php');
  32 }
  33 if (isset($_GET['flag_phone'])){
  34   $flag_phone = $_GET['flag_phone'];
  35   $petition->query("update signatures set signature_status = 'flag_phone' where contact_phone = '$flag_phone' ");
  36   header('Location: abuse.php');
  37 }
  38 include_once('header.php');
  39 if (isset($_GET['ip_address'])){
  40   $ip = $_GET['ip_address'];
  41   echo "<h1>Review $ip</h1><table width='100%' border='1' cellpadding='5' cellspacing='5'>";
  42   $q = "SELECT * FROM  signatures where ip_address = '$ip' ";
  43   $r = $petition->query($q);
  44   while($d = mysqli_fetch_array($r)){
  45     echo "<tr>
  46       <td><b>$d[date_time_signed]</b></td>
  47       <td><a href='?VTRID=$d[VTRID]'>$d[VTRID]</a></td>
  48       <td>$d[petition_id]</td>
  49       <td>$d[signed_name_as]</td>
  50       <td>$d[signed_name_as_circulator]</td>
  51       <td>$d[contact_phone]</td>
  52       <td>$d[signature_status]</td>
  53       <td>$d[printed_status]</td>
  54       <td><a href='?flag_invalid_signature=$d[id]'>flag_invalid_signature</a></td>
  55       <td><a href='?flag_VTRID=$d[VTRID]'>flag_VTRID</a></td>
  56       <td><a href='?flag_ip_address=$d[ip_address]'>flag_ip_address</a></td>
  57       <td><a href='?flag_duplicate=$d[id]'>flag_duplicate</a></td>
  58       <td><a href='?flag_phone=$d[contact_phone]'>contact_phone</a></td>
  59     </tr>";
  60   }
  61   echo "</table>";
  62 }elseif (isset($_GET['VTRID'])){
  63   $VTRID = $_GET['VTRID'];
  64   echo "<h1>Review $VTRID</h1><table width='100%' border='1' cellpadding='5' cellspacing='5'>";
  65   $q = "SELECT * FROM  signatures where VTRID = '$VTRID' ";
  66   $r = $petition->query($q);
  67   while($d = mysqli_fetch_array($r)){
  68     echo "<tr>
  69           <td><b>$d[date_time_signed]</b></td>
  70           <td><a href='?ip_address=$d[ip_address]'>$d[ip_address]</a></td>
  71           <td>$d[petition_id]</td>
  72           <td>$d[signed_name_as]</td>
  73           <td>$d[signed_name_as_circulator]</td>
  74           <td>$d[contact_phone]</td>
  75           <td>$d[signature_status]</td>
  76           <td>$d[printed_status]</td>
  77           <td><a href='?flag_invalid_signature=$d[id]'>flag_invalid_signature</a></td>
  78           <td><a href='?flag_VTRID=$d[VTRID]'>flag_VTRID</a></td>
  79           <td><a href='?flag_ip_address=$d[ip_address]'>flag_ip_address</a></td>
  80           <td><a href='?flag_duplicate=$d[id]'>flag_duplicate</a></td>
  81           <td><a href='?flag_phone=$d[contact_phone]'>contact_phone</a></td>
  82         </tr>";
  83   }
  84   echo "</table>";
  85 }
  86 ?>
  87
  88 <h1>Abuses</h1>
  89 <h2>IP Address List</h2>
  90 <div>Watch for duplicates.</div>
  91 <?PHP
  92 $q="SELECT ip_address, petition_id, COUNT(*) as count FROM signatures where signature_status = 'verified' group by ip_address";
  93 $r = $petition->query($q);
  94 while($d = mysqli_fetch_array($r)){
  95   if ($d['count'] > 1){
  96     echo "<li><a href='?ip_address=$d[ip_address]'>$d[ip_address]</a> $d[petition_id] <b>$d[count]</b></li>";
  97   }
  98 }
  99 ?>
 100
 101 <h2>VTRID List</h2>
 102 <div>Watch for duplicates.</div>
 103 <?PHP
 104 $q="SELECT VTRID, petition_id, COUNT(*) as count FROM signatures where signature_status = 'verified' group by VTRID";
 105 $r = $petition->query($q);
 106 while($d = mysqli_fetch_array($r)){
 107   if ($d['count'] > 1){
 108     echo "<li><a href='?VTRID=$d[VTRID]'>$d[VTRID]</a> $d[petition_id] <b>$d[count]</b></li>";
 109   }
 110 }
 111 ?>
 112
 113
 114 <?PHP
 115 include_once('footer.php');
 116 ?>