From 18b82274f3caa0aa055d6c8ba93ffbb30e1e062c Mon Sep 17 00:00:00 2001
From: BodgeMaster <>
Date: Tue, 7 Sep 2021 09:03:59 +0200
Subject: [PATCH] removed another useless file

---
 README.md |  6 ----
 admin.php | 83 -------------------------------------------------------
 2 files changed, 89 deletions(-)
 delete mode 100644 admin.php
diff --git a/README.md b/README.md
index 8657779..f63e9f1 100644
--- a/README.md
+++ b/README.md
@@ -52,12 +52,6 @@ This folder contains all the files that are parts of ThreadR directly
 A place to store the configuation for a specific ThreadR instance (contains official instance config for now, will be moved elsewhere eventually)
 ### [[DIR] macros](./macros)
 files for use with variable_grabbler.py
-### [admin.php](./admin.php)
-~~This is the file that is shown on the internal admin page. It will contain a list of users, forums, threads, etc.
-At the moment, it is just a convenient way to access the other internal administration tools.
-This is not directly a part of ThreadR.~~
-
-This is part of the server management tools and therefore will be gone from this repository soon.
 ### [default.html](./default.html)
 The main index.html on the server. It redirects to ThreadR.
 ### [deployment_script.sh](./deployment_script.sh)
diff --git a/admin.php b/admin.php
deleted file mode 100644
index 6c925c6..0000000
--- a/admin.php
+++ /dev/null
@@ -1,83 +0,0 @@
-<?php
-  %PLEAZE_NO_CACHE%
-  $permitted_chars = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ&/()[]$:?_';
-
-  function generate_salt($input, $strength = 5) {
-    $input_length = strlen($input);
-    $random_string = '';
-    for($i = 0; $i < $strength; $i++) {
-      $random_character = $input[random_int(0, $input_length - 1)];
-      $random_string .= $random_character;
-    }
-    return $random_string;
-  }
-
-  $random_salt = generate_salt($permitted_chars);
-  $password_hash_method = "sha256";
-
-  $pdo = new PDO('mysql:host=%DB_SERVER%;dbname=%DB_NAME%', '%DB_USERNAME%', '%DB_PASSWORD%');
-  $query = "SELECT id, name, authentication_algorithm FROM users;";
-
-  if (isset($_GET['action'])) {
-    if ($_GET['action']=='add') {
-      $error = false;
-      $error_message = "";
-      if ($_POST['name']=='' || $_POST['password']=='' || $_POST['password_confirmation']=='') {
-        $error = true;
-        $error_message = "<p>Error: Not all values populated.</p>";
-      }
-      if ($_POST['password'] != $_POST['password_confirmation']) {
-        $error = true;
-        $error_message = "<p>Error: Password confirmation does not match password.</p>";
-      }
-      if (!$error) {
-        $statement = $pdo->prepare('INSERT INTO users (name, authentication_string, authentication_salt, authentication_algorithm) VALUES (:name, :authentication_string, :authentication_salt, :authentication_algorithm)');
-        $result = $statement->execute(array('name' => $_POST['name'], 'authentication_string' => hash($password_hash_method, $_POST['password'] . $random_salt), 'authentication_salt' => $random_salt, 'authentication_algorithm' => $password_hash_method));
-        if (!$result) {
-          $error_message = "<p>Error: SQL error.</p><pre>" . $statement->queryString . "</pre><pre>" . $statement->errorInfo()[2] . "</pre>";
-        }
-      }
-    }
-  }
-?>
-<!DOCTYPE html>
-<html>
-  <head>
-    <title> LostCave Admin Page </title>
-    <meta charset="utf-8" />
-  </head>
-  <body>
-    <h1> Useful links </h1>
-      <ul>
-        <li><a href="http://admin.strassenkind.ip/phpmyadmin/" > PHPMyAdmin </a></li>
-        <li><a href="http://admin.strassenkind.ip/postfixadmin/" > PostfixAdmin </a></li>
-        <li><a href="http://strassenkind.ip/" > Server status page </a></li>
-        <li><a href="http://strassenkind.ip/git/" > Gitea </a></li>
-        <li><a href="http://admin.strassenkind.ip/phpinfo.php"> phpinfo(); </a></li>
-        <li><a href="http://admin.strassenkind.ip/stdout.log"> Just normal server logs, nothing to see here. </a></li>
-        <li><a href="http://admin.strassenkind.ip/stderr.log"> Just normal server error logs, nothing to see here. </a></li>
-      </ul>
-    <h1> User Management </h1>
-    <h2> Registered Users </h2>
-    <table>
-      <tr><td>User ID</td><td>Name</td><td>Authentication algorithm</td></tr>
-      <?php
-        foreach ($pdo->query($query) as $row) {
-          echo "<tr><td>".$row['id']."</td><td>".$row['name']."</td><td>".$row['authentication_algorithm']."</td></tr>";
-        }
-      ?>
-    </table>
-    <h2> Add user </h2>
-    <form action="?action=add" method="post">
-      <input type="text" maxlength="20" name="name" placeholder="Username" />
-      <input type="password" maxlength="256" name="password" placeholder="Password" />
-      <input type="password" maxlength="256" name="password_confirmation" placeholder="Repeat password" />
-      <input type="submit" value="Add" />
-      <?php
-        if (isset($error_message)) {
-          echo $error_message;
-        }
-      ?>
-    </form>
-  </body>
-</html>

User ID	Name	Authentication algorithm
".$row['id']."	".$row['name']."	".$row['authentication_algorithm']."