Administering a module.

Client Joined: Oct 07, 2003 Posts: 735 Location: Ohio

I am deep into developing a backend for my MILPACS module. How does Nuke handle administration outside its public_html/admin/modules/module_name.php?

I have many pages for the backend such as editsoldier, editunit, addsoldier, addweapon, addrank....this list goes on.

Where should these be stored in the Nuke structure if I want to also have an external administration login?

Much like vWar. You can either access the admin function thru the admin panel in Nuke or there is a separate login in the modules.php?name=vwar page at the bottom.

I assume it can access modules/vwar/admin.php

Posted: Sat Feb 19, 2005 5:41 pm

I like the method of putting the modules admin files in the modules directory
Say modules/MILPACS/admin/
The reason I like this is its much easier to simply delete one directory then if you have to remove or upgrade a module. But it will require a little extra work to make it safe and still leave the non nuked access because the main protection for such a directory at least on Apache is to put deny from all in the .htaccess file and access those pages only with admin.php

Posted: Sat Feb 19, 2005 7:39 pm

Thanks for the feedback.

Do you happen to know why I would be getting this in a lost_password.php page.

Quote:

Fatal error: Cannot redeclare head() (previously declared in /home/thirdadm/public_html/header.php:29) in /home/thirdadm/public_html/header.php on line 28

All my other pages have an include("header.php") in them and don't get this error.

Code:

<? 


//////////////////////////////////////////////////////////////////////


//===========================


// MILPACS


//


// This is the Military Personell and Classification System.


//  Lost pasword page


//


//


///////////////////////////////////////////////////////////////////////





if (!eregi("modules.php", $PHP_SELF )) {


   die ("You can't access this file directly...");


    }


$index=0;


require_once("mainfile.php");


//finds the server's root directory


$self = dirname(__FILE__ );


$nukemod = basename($self);


$rootdir = eregi_replace("/modules/$nukemod", "", $self);


global $module_name, $db;


$module_name = basename(dirname(__FILE__ ));


include("modules/MILPACS/db.inc.php");


include("header.php");








switch($_POST['recover']){ 


    default: 


    include 'lost_password.php'; 


    break; 


     


    case "recover": 


    recover_pw($_POST['email']); 


    break; 


} 


function recover_pw($email){ 


    if(!$email){ 


        echo "You forgot to enter your Email address <strong>Soldier</strong><br />"; 


        include 'lost_password.php'; 


        exit(); 


    } 


    // quick check to see if record exists     


    $sql_check = mysql_query("SELECT * FROM milpacs_members WHERE email='$email'"); 


    $sql_check_num = mysql_num_rows($sql_check); 


    if($sql_check_num == 0){ 


        echo "No records found matching your email address<br />"; 


        include 'lost_password.php'; 


        exit(); 


    } 


    // Everything looks ok, generate password, update it and send it! 


     


    function makeRandomPassword() { 


          $salt = "abchefghjkmnpqrstuvwxyz0123456789"; 


          srand((double)microtime()*1000000); 


          $i = 0; 


          while ($i <= 7) { 


                $num = rand() % 33; 


                $tmp = substr($salt, $num, 1); 


                $pass = $pass . $tmp; 


                $i++; 


          } 


          return $pass; 


    } 





    $random_password = makeRandomPassword(); 





    $db_password = md5($random_password); 


     


    $sql = mysql_query("UPDATE milpacs_members SET password='$db_password' WHERE email='$email'"); 


     


    $subject = "Your password for the MILPCAS system!"; 


    $message = "Hello Soldier, your password as been reset. 


     


    New Password: $random_password 


      


   http://www.3rd-infantry-division.net 


     


    Thanks! 


    The Webmaster 


     


    This is an automated response, please do not reply!"; 


     


    mail($email_address, $subject, $message, "From: 3rd Infantry Division<admin@3rd-infantry-division.net>\n 


        X-Mailer: PHP/" . phpversion()); 


    echo "Your password has been sent! Please check your email!<br />"; 


    include 'login.php'; 


} 


?>