here it is:
<html>
<head>
<title>MySQL Databases</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="css.css" rel="stylesheet" type="text/css">
</head>
<script>
function checkprivs() {
if (document.adduserdb.ALTER.checked == true ||
document.adduserdb.CREATETEMPORARYTABLES.checked == true ||
document.adduserdb.CREATE.checked == true ||
document.adduserdb.DELETE.checked == true ||
document.adduserdb.DROP.checked == true ||
document.adduserdb.SELECT.checked == true ||
document.adduserdb.INSERT.checked == true ||
document.adduserdb.UPDATE.checked == true ||
document.adduserdb.REFERENCES.checked == true ||
document.adduserdb.INDEX.checked == true ||
document.adduserdb.LOCKTABLES.checked == true) {
document.adduserdb.ALL.checked = false;
}
}
function checkallprivs() {
if (document.adduserdb.ALL.checked == true) {
document.adduserdb.ALTER.checked=false;
document.adduserdb.CREATETEMPORARYTABLES.checked=false;
document.adduserdb.CREATE.checked=false;
document.adduserdb.DELETE.checked=false;
document.adduserdb.DROP.checked=false;
document.adduserdb.SELECT.checked=false;
document.adduserdb.INSERT.checked=false;
document.adduserdb.UPDATE.checked=false;
document.adduserdb.REFERENCES.checked=false;
document.adduserdb.INDEX.checked=false;
document.adduserdb.LOCKTABLES.checked=false;
}
}
</script>
<body>
<?php
# Rename Variable
$Command = $_POST['Command'];
# Define Admin Info
$DBUser = "root";
$DBPass = "";
$Host = "localhost";
$connection = mysql_connect($Host,$DBUser,$DBPass);
# What to do
if (!($Command))
{
# Deleting Stuff
if ($_GET['act'] == "delete")
{
if ($_GET['delete'] == "db")
{
$db = $_GET['db'];
$sql = "DROP $db";
mysql_query($sql) OR die("Cannot delete database $db.");
# Display Success Message
echo "Successfully deleted database $db.";
echo "<BR>";
echo "<a href='java script:history.back(1)'>Go Back.</a>";
}
if ($_GET['delete'] == "user_db")
{
$user = $_GET['user'];
$db = $_GET['db'];
$sql = "REVOKE PRIVILEGES ON {$user}@localhost FROM $db";
mysql_query($sql) OR die("Cannot remove user $user from database $db.");
# Display Success Message
echo "Successfully removed user $user from database $db.";
echo "<BR>";
echo "<a href='java script:history.back(1)'>Go Back.</a>";
}
if ($_GET['delete'] == "user")
{
$user = $_GET['user'];
$sql = 'DELETE * FROM user WHERE `User` = "'.$user.'"';
mysql_query($sql) or die("Cannot delete user $user.");
# Display Success Message
echo "Successfully deeleted user $user.";
echo "<BR>";
echo "<a href='java script:history.back(1)'>Go Back.</a>";
}
}
?>
<table width="75%" border="1">
<tr>
<td>Databases</td>
</tr>
<tr>
<td><form name="createdb" method="post" action="<?php echo $PHP_SELF; ?>">
<p>
<input name="db" type="text" id="db">
<input name="createdb" type="submit" id="createdb" value="Create Database">
<input name="Command" type="hidden" id="Command" value="createdb">
</p>
</form>
<p>Current Databases:</p>
<ol>
<?php
mysql_select_db(mysql,$connection);
$db_query = mysql_query('SELECT `Db` FROM db');
while($db_array = mysql_fetch_array($db_query))
{
$db_result = $db_array[Db];
?>
<li>
<?php
echo "$db_result - | <a href='{$PHP_SELF}?act=delete&delete=db&db={$db_result}'>Delete</a> | <br>";
?>
<u>Users in
<?php echo "$db_result";
?>
<br>
</u>
<?php
$user_db_query = mysql_query("SELECT * FROM db WHERE `Db` = '".$db_result."'");
while($user_db_array = mysql_fetch_array($user_db_query))
{
$user_db = $user_db_array[User];
echo "$user_db - | <a href='{$PHP_SELF}?act=delete&delete=user_db&user={$user_db}&db={$db_result}'>Delete</a> |";
}
?>
<br><br>
</li>
<?php
}
?>
</ol>
</td>
</tr>
</table>
<br>
<table width="75%" border="1">
<tr>
<td>Users</td>
</tr>
<tr>
<td>
<form name="createuser" method="post" action="<?php echo $PHP_SELF; ?>">
Username:
<input name="username" type="text" id="username">
<br>
Password:
<input name="password" type="text" id="password"><br>
<input name="createuser" type="submit" id="createuser" value="Create User">
<input name="Command" type="hidden" id="Command" value="createuser">
</form>
<p>Current Users:</p>
<ol>
<?php
$user_query = mysql_query("SELECT * FROM user");
while($user_array = mysql_fetch_array($user_query))
{
?>
<li>
<?php
$user = $user_array['User'];
echo "$user - | <a href='{$PHP_SELF}?act=delete&delete=user&user={$user}'>Delete</a> |<br>";
?>
</li>
<?php
}
?>
</ol>
</td>
</tr>
</table><br>
<table width="75%" border="1">
<tr>
<td height="23">Privileges</td>
</tr>
<tr>
<td height="337">
<form name="adduserdb" method="post" action="<?php echo $PHP_SELF; ?>">
User:
<select name=user>
<?php
$user_query = mysql_query("SELECT * FROM user");
while($user_array = mysql_fetch_array($user_query))
{
?>
<option value="<?php echo "$user_array[Users]"; ?>"><?php echo "$user_array[User]"; ?></option>
<?php
}
?>
</select>
Db:
<select name=db id="db">
<?php
$databases_query = mysql_query("SELECT * FROM db");
while($databases_array = mysql_fetch_array($databases_query))
{
?>
<option value="<?php echo "$databases_array[Db]"; ?>"><?php echo "$databases_array[Db]"; ?></option>
<?php
}
?>
</select>
<br>
<br>
<input type=checkbox name="ALL" value="Yes" checked onClick="checkallprivs();">
ALL<br>
<input type=checkbox name="ALTER" value="Yes" onClick="checkprivs();">
ALTER<br>
<input type=checkbox name="CREATETEMPORARYTABLES" value="Yes" onClick="checkprivs();">
CREATE TEMPORARY TABLES<br>
<input type=checkbox name="CREATE" value="Yes" onClick="checkprivs();">
CREATE<br>
<input type=checkbox name="DELETE" value="Yes" onClick="checkprivs();">
DELETE<br>
<input type=checkbox name="DROP" value="Yes" onClick="checkprivs();">
DROP<br>
<input type=checkbox name="SELECT" value="Yes" onClick="checkprivs();">
SELECT<br>
<input type=checkbox name="INSERT" value="Yes" onClick="checkprivs();">
INSERT<br>
<input type=checkbox name="UPDATE" value="Yes" onClick="checkprivs();">
UPDATE<br>
<input type=checkbox name="REFERENCES" value="Yes" onClick="checkprivs();">
REFERENCES<br>
<input type=checkbox name="INDEX" value="Yes" onClick="checkprivs();">
INDEX<br>
<input type=checkbox name="LOCKTABLES" value="Yes" onClick="checkprivs();">
LOCK TABLES<br>
<input name="submit" type=submit value="Add User to Database">
<input name="Command" type="hidden" id="Command" value="privileges">
</form>
</td>
</tr>
</table>
<p>
<a href="../phpmyadmin/index.php">PHP My Admin</a></p>
<p>
<?php
} else {
# Which form is it?
# This works
if ($Command == "createdb")
{
# Rename Variables
$db = $_POST['db'];
# Query
$sql = "CREATE DATABASE $db";
mysql_query($sql,$connection) or die("PHP failed to create database $db.");
# Display success message
echo "Successfully created database $db.";
echo "<BR>";
echo "<a href='java script:history.back(1)'>Go Back.</a>";
}
# This doesn't work
if ($Command == "createuser")
{
# Rename Variables
$username = $_POST['username'];
$password = $_POST['password'];
$hash = md5($password);
# Query
mysql_select_db(mysql,$connection);
$sql = "INSERT INTO `user` VALUES('localhost', '$username', Password('$hash), '','','','','','','','','','','','','','');";
mysql_query($sql,$connection) or die("PHP failed to create user $username.");
# Display Success Message
echo "Successfully created user $username.";
echo "<BR>";
echo "<a href='java script:history.back(1)'>Go Back.</a>";
}
# This doesn't work
if ($Command == "privileges")
{
# Rename Variables
$user = $_POST['user'];
$db = $_POST['db'];
$all = $_POST['ALL'];
$alter = $_POST['ALTER'];
$createtemporarytables = $_POST['CREATETEMPORARYTABLES'];
$create = $_POST['CREATE'];
$delete = $_POST['DELETE'];
$drop = $_POST['DROP'];
$select = $_POST['SELECT'];
$insert = $_POST['INSERT'];
$update = $_POST['UPDATE'];
$references = $_POST['REFERENCES'];
$index = $_POST['INDEX'];
$locktables = $_POST['LOCKTABLES'];
# Do something?
mysql_select_db(mysql,$connection);
$sql = "";
mysql_query($sql) or die("PHP could not give $user privileges to database $db.");
# Display Success Message
echo "Successfully gave user $user privileges to database $db.";
echo "<BR>";
echo "<a href='java script:history.back(1)'>Go Back.</a>";
}
}
?>
</p>
</body>
</html>
thanks...also, i dont wanna use phpmyadmin cuz it crashes on a lot...plus this is a bit easier to manage mysql dbs
