<?php
session_start();

$adminname = "name";
$adminpass = "pw";

$datei = "news.txt";

if ($_SESSION['pw'] != $adminpass && $_SESSION['user'] != $adminname) {
    if (!isset($_POST["login_name"]) || !isset($_POST["login_pw"])) {
        ?>
<form action="<?=$_SERVER['PHP_SELF'];?>" method="post">
   name
         <input type="text" size="40" name="login_name">
            

            
        
   pw:
        <input type="text" size="40" name="login_pw">
            

            

         <input type="submit" value="einloggen"> 
         <input type="reset" value="Eingabe löschen" name="reset">
</form>
    <?
    } else {
        if ($_POST["login_name"] == $adminname && $_POST["login_pw"] == $adminpass) {
        $_SESSION['name'] = $adminname;
        $_SESSION['pw'] = $adminpass;
        header("location: ".$_SERVER['PHP_SELF']);
        } else {
            echo "falsche daten";
        }
    }
} elseif ($_SESSION['name'] == $adminname || $_SESSION['pw'] == $adminpass) {
    if ($_GET["do"] == "delete") {
        if (!isset($_GET["id"]) || $_GET["id"] == "") {
             $gbook = file($datei);
             krsort ($gbook);
             $gbook = str_replace ("|", "
", $gbook);
             foreach ($gbook as $id => $mein_gbook) {
                 echo '<font size="1" color="black" face="Verdana">Diese News löschen</font>
'.$mein_gbook."
";
             }
        } else {
            $file = file($datei); 
            $file[$_GET["id"]] = ""; 
            $string = join("", $file); 
            $fp = fopen($datei, "w"); 
            fwrite($fp,$string); 
            fclose($fp);
            echo "News gelöscht";
        }
    } elseif ($_GET["do"] == "post") {
        if (!isset($_POST["name"]) || !isset($_POST["text"])) {
            ?>
<form action="<?=$_SERVER['PHP_SELF'];?>?do=post" method="post">
   name
         <input type="text" size="40" name="name">
            

            
        
   text
         <textarea cols="100" rows="10" name="text"></textarea>
            

            

         <input type="submit" value="News Posten"> 
         <input type="reset" value="Eingabe löschen" name="reset">
</form>
        <?
        } else {
             $text = $_POST["text"];
            $name = $_POST["name"];
               $text = strip_tags ($text);  
            $text = htmlentities ($text);
            $text = stripslashes ($text);
            $text = str_replace ("\n", "
", $text);
            $name = htmlentities ($name);
            $oeffnen = fopen ($datei, "a");
            fwrite ($oeffnen, 
              "<font size=1 color=black face=Verdana><u>eingetragen von</u> $name</font>

<font size=1 color=black face=Verdana><u>text</u> $text</font>

\n");
            fclose ($oeffnen);
            echo "News Gepostet";
        }
    } else {
        ?>
        Löschen von News
        

        Posten von News
        <?
    }          
} else {
    echo "404 - error";
}
?>