Server : Apache
System : Linux profile 3.10.0-1160.88.1.el7.x86_64 #1 SMP Tue Mar 7 15:41:52 UTC 2023 x86_64
User : apache ( 48)
PHP Version : 8.0.28
Disable Function : NONE
Directory : /var/www/html/pragyabhardwaj/admin/
|
Server : Apache System : Linux profile 3.10.0-1160.88.1.el7.x86_64 #1 SMP Tue Mar 7 15:41:52 UTC 2023 x86_64 User : apache ( 48) PHP Version : 8.0.28 Disable Function : NONE Directory : /var/www/html/pragyabhardwaj/admin/ |
<?php
// 🛡️ Initialize the PHP context environment wrapper securely
if (session_status() === PHP_SESSION_NONE) {
session_start();
}
// 🛡️ Mitigate Clickjacking vulnerabilities by preventing unauthorized <iframe> rendering
header("X-Frame-Options: DENY");
header("Content-Security-Policy: frame-ancestors 'none';");
// 🛡️ Generate a cryptographically secure token validation key if missing
if (empty($_SESSION['csrf_token'])) {
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Dashboard</title>
<link href="https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600&display=swap" rel="stylesheet">
<link rel="stylesheet" href="static/css/admin.css">
</head>
<body>
<div class="topbar">
<div class="topbar-inner">
<!-- LEFT -->
<div class="topbar-left">
<div class="title">Admin Panel</div>
</div>
<!-- RIGHT -->
<div class="topbar-right flex-align-center">
<div class="user">Welcome, Admin</div>
<!-- 🛡️ FIXED: Converted risky GET logout link into a secure CSRF-protected POST execution element -->
<form action="index.php?page=logout" method="POST" class="d-inline">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token'], ENT_QUOTES, 'UTF-8'); ?>">
<button type="submit" class="logout-btn" style="border: none; background: none; cursor: pointer;">
Logout
</button>
</form>
</div>
</div>
</div>
<div class="container">
<!-- HEADER -->
<div class="header">
<h2>Dashboard</h2>
<p>Manage all your portfolio content from here</p>
</div>
<!-- GRID -->
<div class="grid">
<div class="card">
<div class="icon">🎓</div>
<h3>Education</h3>
<p>Manage academic records</p>
<a href="index.php?page=education_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">💼</div>
<h3>Experience</h3>
<p>Work experience timeline</p>
<a href="index.php?page=experience_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">🏛</div>
<h3>Administrative</h3>
<p>Roles & responsibilities</p>
<a href="index.php?page=admin_roles_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">🏛</div>
<h3>Academic Expertise</h3>
<p>Manage Academic Expertise</p>
<a href="index.php?page=academic_expertise_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">📌</div>
<h3>Positions</h3>
<p>Professional positions</p>
<a href="index.php?page=professional_positions_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">🔬</div>
<h3>Research</h3>
<p>Research & studies</p>
<a href="index.php?page=research_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">🚀</div>
<h3>Projects</h3>
<p>Project portfolio</p>
<a href="index.php?page=project_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">📚</div>
<h3>Publications</h3>
<p>All publications</p>
<a href="index.php?page=publication_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">📖</div>
<h3>Book Chapters</h3>
<p>Book contributions</p>
<a href="index.php?page=book_chapter_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">📄</div>
<h3>UGC Publications</h3>
<p>UGC indexed papers</p>
<a href="index.php?page=ugc_publication_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">📄</div>
<h3>Conference Proceedings</h3>
<p>Conference Proceedings papers</p>
<a href="index.php?page=cpp_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">🏆</div>
<h3>Awards</h3>
<p>Manage awards & honors</p>
<a href="index.php?page=award_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">🏆</div>
<h3>Rewards</h3>
<p>Manage rewards & achievements</p>
<a href="index.php?page=reward_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">🎓</div>
<h3>Fellowship</h3>
<p>Manage fellowships</p>
<a href="index.php?page=fellowship_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">🎓</div>
<h3>Recognition</h3>
<p>Manage Recognition</p>
<a href="index.php?page=recognition_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">🎓</div>
<h3>Outreach</h3>
<p>Manage Outreach</p>
<a href="index.php?page=outreach_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">🎖</div>
<h3>NCC Activities</h3>
<p>Manage NCC activities & records</p>
<a href="index.php?page=ncc_activities_form" class="btn">Open</a>
</div>
<div class="card">
<div class="icon">⚙</div>
<h3>Settings</h3>
<p>System configuration</p>
<a href="#" class="btn">Open</a>
</div>
</div>
</div>
</body>
</html>