Clean up /manage handler, refer to manage functions as actions

2025-08-03 23:56:22 -07:00 · 2020-10-10 16:17:36 -07:00 · 2020-10-10 16:17:36 -07:00 · cba60dc06b
commit cba60dc06b
parent 556a0e92f7
5 changed files with 103 additions and 143 deletions
--- a/pkg/manage/actions.go
+++ b/pkg/manage/actions.go
@ -0,0 +1,831 @@
+package manage
+
+import (
+	"bytes"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"html"
+	"io/ioutil"
+	"net/http"
+	"os"
+	"path"
+	"regexp"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/gochan-org/gochan/pkg/building"
+	"github.com/gochan-org/gochan/pkg/config"
+	"github.com/gochan-org/gochan/pkg/gclog"
+	"github.com/gochan-org/gochan/pkg/gcsql"
+	"github.com/gochan-org/gochan/pkg/gctemplates"
+	"github.com/gochan-org/gochan/pkg/gcutil"
+	"github.com/gochan-org/gochan/pkg/posting"
+	"github.com/gochan-org/gochan/pkg/serverutil"
+)
+
+const (
+	// NoPerms allows anyone to access this Action
+	NoPerms = iota
+	// JanitorPerms allows anyone with at least a janitor-level account to access this Action
+	JanitorPerms
+	// ModPerms allows anyone with at least a moderator-level account to access this Action
+	ModPerms
+	// AdminPerms allows only the site administrator to view this Action
+	AdminPerms
+)
+
+var (
+	chopPortNumRegex = regexp.MustCompile(`(.+|\w+):(\d+)$`)
+)
+
+// Action represents the functions accessed by staff members at /manage?action=<functionname>.
+type Action struct {
+	Title       string `json:"title"`
+	Permissions int    `json:"perms"` // 0 = non-staff, 1 => janitor, 2 => moderator, 3 => administrator
+	isJSON      bool   `json:"-"`     // if it can sometimes return JSON, this should still be false
+
+	Callback func(writer http.ResponseWriter, request *http.Request) (string, error) `json:"-"` //return string of html output
+}
+
+var actions = map[string]Action{
+	"cleanup": {
+		Title:       "Cleanup",
+		Permissions: AdminPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			htmlOut = `<h2 class="manage-header">Cleanup</h2><br />`
+
+			if request.FormValue("run") == "Run Cleanup" {
+				htmlOut += "Removing deleted posts from the database.<hr />"
+				if err = gcsql.PermanentlyRemoveDeletedPosts(); err != nil {
+					err = errors.New(
+						gclog.Print(gclog.LErrorLog, "Error removing deleted posts from database: ", err.Error()))
+					return htmlOut + "<tr><td>" + err.Error() + "</td></tr></table>", err
+				}
+				// TODO: remove orphaned replies and uploads
+
+				htmlOut += "Optimizing all tables in database.<hr />"
+				err = gcsql.OptimizeDatabase()
+				if err != nil {
+					err = errors.New(
+						gclog.Print(gclog.LErrorLog, "Error optimizing SQL tables: ", err.Error()))
+					return htmlOut + "<tr><td>" + err.Error() + "</td></tr></table>", err
+				}
+
+				htmlOut += "Cleanup finished"
+			} else {
+				htmlOut += `<form action="/manage?action=cleanup" method="post">` +
+					`<input name="run" id="run" type="submit" value="Run Cleanup" />` +
+					`</form>`
+			}
+			return htmlOut, nil
+		}},
+	"config": {
+		Title:       "Configuration",
+		Permissions: AdminPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			do := request.FormValue("do")
+			var status string
+			if do == "save" {
+				configJSON, err := json.MarshalIndent(config.Config, "", "\t")
+				if err != nil {
+					status += gclog.Println(gclog.LErrorLog, err.Error()) + "<br />"
+				} else if err = ioutil.WriteFile("gochan.json", configJSON, 0777); err != nil {
+					status += gclog.Println(gclog.LErrorLog,
+						"Error backing up old gochan.json, cancelling save:", err.Error())
+				} else {
+					config.Config.Lockdown = (request.PostFormValue("Lockdown") == "on")
+					config.Config.LockdownMessage = request.PostFormValue("LockdownMessage")
+					SillytagsArr := strings.Split(request.PostFormValue("Sillytags"), "\n")
+					var Sillytags []string
+					for _, tag := range SillytagsArr {
+						Sillytags = append(Sillytags, strings.Trim(tag, " \n\r"))
+					}
+
+					config.Config.Sillytags = Sillytags
+					config.Config.UseSillytags = (request.PostFormValue("UseSillytags") == "on")
+					config.Config.Modboard = request.PostFormValue("Modboard")
+					config.Config.SiteName = request.PostFormValue("SiteName")
+					config.Config.SiteSlogan = request.PostFormValue("SiteSlogan")
+					config.Config.SiteHeaderURL = request.PostFormValue("SiteHeaderURL")
+					config.Config.SiteWebfolder = request.PostFormValue("SiteWebfolder")
+					// TODO: Change this to match the new Style type in gochan.json
+					/* Styles_arr := strings.Split(request.PostFormValue("Styles"), "\n")
+					var Styles []string
+					for _, style := range Styles_arr {
+						Styles = append(Styles, strings.Trim(style, " \n\r"))
+					}
+					config.Styles = Styles */
+					config.Config.DefaultStyle = request.PostFormValue("DefaultStyle")
+					config.Config.AllowDuplicateImages = (request.PostFormValue("AllowDuplicateImages") == "on")
+					config.Config.AllowVideoUploads = (request.PostFormValue("AllowVideoUploads") == "on")
+					NewThreadDelay, err := strconv.Atoi(request.PostFormValue("NewThreadDelay"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.NewThreadDelay = NewThreadDelay
+					}
+
+					ReplyDelay, err := strconv.Atoi(request.PostFormValue("ReplyDelay"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.ReplyDelay = ReplyDelay
+					}
+
+					MaxLineLength, err := strconv.Atoi(request.PostFormValue("MaxLineLength"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.MaxLineLength = MaxLineLength
+					}
+
+					ReservedTripsArr := strings.Split(request.PostFormValue("ReservedTrips"), "\n")
+					var ReservedTrips []string
+					for _, trip := range ReservedTripsArr {
+						ReservedTrips = append(ReservedTrips, strings.Trim(trip, " \n\r"))
+
+					}
+					config.Config.ReservedTrips = ReservedTrips
+
+					ThumbWidth, err := strconv.Atoi(request.PostFormValue("ThumbWidth"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.ThumbWidth = ThumbWidth
+					}
+
+					ThumbHeight, err := strconv.Atoi(request.PostFormValue("ThumbHeight"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.ThumbHeight = ThumbHeight
+					}
+
+					ThumbWidthReply, err := strconv.Atoi(request.PostFormValue("ThumbWidthReply"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.ThumbWidthReply = ThumbWidthReply
+					}
+
+					ThumbHeightReply, err := strconv.Atoi(request.PostFormValue("ThumbHeightReply"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.ThumbHeightReply = ThumbHeightReply
+					}
+
+					ThumbWidthCatalog, err := strconv.Atoi(request.PostFormValue("ThumbWidthCatalog"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.ThumbWidthCatalog = ThumbWidthCatalog
+					}
+
+					ThumbHeightCatalog, err := strconv.Atoi(request.PostFormValue("ThumbHeightCatalog"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.ThumbHeightCatalog = ThumbHeightCatalog
+					}
+
+					RepliesOnBoardPage, err := strconv.Atoi(request.PostFormValue("RepliesOnBoardPage"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.RepliesOnBoardPage = RepliesOnBoardPage
+					}
+
+					StickyRepliesOnBoardPage, err := strconv.Atoi(request.PostFormValue("StickyRepliesOnBoardPage"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.StickyRepliesOnBoardPage = StickyRepliesOnBoardPage
+					}
+
+					BanColorsArr := strings.Split(request.PostFormValue("BanColors"), "\n")
+					var BanColors []string
+					for _, color := range BanColorsArr {
+						BanColors = append(BanColors, strings.Trim(color, " \n\r"))
+
+					}
+					config.Config.BanColors = BanColors
+
+					config.Config.BanMsg = request.PostFormValue("BanMsg")
+					EmbedWidth, err := strconv.Atoi(request.PostFormValue("EmbedWidth"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.EmbedWidth = EmbedWidth
+					}
+
+					EmbedHeight, err := strconv.Atoi(request.PostFormValue("EmbedHeight"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.EmbedHeight = EmbedHeight
+					}
+
+					config.Config.ExpandButton = (request.PostFormValue("ExpandButton") == "on")
+					config.Config.ImagesOpenNewTab = (request.PostFormValue("ImagesOpenNewTab") == "on")
+					config.Config.MakeURLsHyperlinked = (request.PostFormValue("MakeURLsHyperlinked") == "on")
+					config.Config.NewTabOnOutlinks = (request.PostFormValue("NewTabOnOutlinks") == "on")
+					config.Config.MinifyHTML = (request.PostFormValue("MinifyHTML") == "on")
+					config.Config.MinifyJS = (request.PostFormValue("MinifyJS") == "on")
+					config.Config.DateTimeFormat = request.PostFormValue("DateTimeFormat")
+					AkismetAPIKey := request.PostFormValue("AkismetAPIKey")
+
+					if err = serverutil.CheckAkismetAPIKey(AkismetAPIKey); err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.AkismetAPIKey = AkismetAPIKey
+					}
+
+					config.Config.UseCaptcha = (request.PostFormValue("UseCaptcha") == "on")
+					CaptchaWidth, err := strconv.Atoi(request.PostFormValue("CaptchaWidth"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.CaptchaWidth = CaptchaWidth
+					}
+					CaptchaHeight, err := strconv.Atoi(request.PostFormValue("CaptchaHeight"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.CaptchaHeight = CaptchaHeight
+					}
+
+					config.Config.EnableGeoIP = (request.PostFormValue("EnableGeoIP") == "on")
+					config.Config.GeoIPDBlocation = request.PostFormValue("GeoIPDBlocation")
+
+					MaxRecentPosts, err := strconv.Atoi(request.PostFormValue("MaxRecentPosts"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.MaxRecentPosts = MaxRecentPosts
+					}
+
+					config.Config.EnableAppeals = (request.PostFormValue("EnableAppeals") == "on")
+					MaxLogDays, err := strconv.Atoi(request.PostFormValue("MaxLogDays"))
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else {
+						config.Config.MaxLogDays = MaxLogDays
+					}
+
+					configJSON, err = json.MarshalIndent(config.Config, "", "\t")
+					if err != nil {
+						status += err.Error() + "<br />"
+					} else if err = ioutil.WriteFile("gochan.json", configJSON, 0777); err != nil {
+						status = gclog.Print(gclog.LErrorLog, "Error writing gochan.json: ", err.Error())
+					} else {
+						status = "Wrote gochan.json successfully<br />"
+						building.BuildJS()
+					}
+				}
+			}
+			manageConfigBuffer := bytes.NewBufferString("")
+			if err = gctemplates.ManageConfig.Execute(manageConfigBuffer,
+				map[string]interface{}{"config": config.Config, "status": status}); err != nil {
+				err = errors.New(gclog.Print(gclog.LErrorLog,
+					"Error executing config management page: ", err.Error()))
+				return htmlOut + err.Error(), err
+			}
+			htmlOut += manageConfigBuffer.String()
+			return htmlOut, nil
+		}},
+	"login": {
+		Title:       "Login",
+		Permissions: NoPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			if GetStaffRank(request) > 0 {
+				http.Redirect(writer, request, path.Join(config.Config.SiteWebfolder, "manage"), http.StatusFound)
+			}
+			username := request.FormValue("username")
+			password := request.FormValue("password")
+			redirectAction := request.FormValue("action")
+			if redirectAction == "" {
+				redirectAction = "announcements"
+			}
+			if username == "" || password == "" {
+				//assume that they haven't logged in
+				htmlOut = `<form method="POST" action="` + config.Config.SiteWebfolder + `manage?action=login" id="login-box" class="staff-form">` +
+					`<input type="hidden" name="redirect" value="` + redirectAction + `" />` +
+					`<input type="text" name="username" class="logindata" /><br />` +
+					`<input type="password" name="password" class="logindata" /><br />` +
+					`<input type="submit" value="Login" />` +
+					`</form>`
+			} else {
+				key := gcutil.Md5Sum(request.RemoteAddr + username + password + config.Config.RandomSeed + gcutil.RandomString(3))[0:10]
+				createSession(key, username, password, request, writer)
+				http.Redirect(writer, request, path.Join(config.Config.SiteWebfolder, "manage?action="+request.FormValue("redirect")), http.StatusFound)
+			}
+			return
+		}},
+	"logout": {
+		Title:       "Logout",
+		Permissions: JanitorPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			cookie, _ := request.Cookie("sessiondata")
+			cookie.MaxAge = 0
+			cookie.Expires = time.Now().Add(-7 * 24 * time.Hour)
+			http.SetCookie(writer, cookie)
+			return "Logged out successfully", nil
+		}},
+	"announcements": {
+		Title:       "Announcements",
+		Permissions: JanitorPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			htmlOut = `<h1 class="manage-header">Announcements</h1><br />`
+
+			//get all announcements to announcement list
+			//loop to html if exist, no announcement if empty
+			announcements, err := gcsql.GetAllAccouncements()
+			if err != nil {
+				return "", err
+			}
+			if len(announcements) == 0 {
+				htmlOut += "No announcements"
+			} else {
+				for _, announcement := range announcements {
+					htmlOut += `<div class="section-block">` +
+						`<div class="section-title-block"><b>` + announcement.Subject + `</b> by ` + announcement.Poster + ` at ` + announcement.Timestamp.Format(config.Config.DateTimeFormat) + `</div>` +
+						`<div class="section-body">` + announcement.Message + `</div></div>`
+				}
+			}
+			return htmlOut, nil
+		}},
+	"bans": {
+		Title:       "Bans",
+		Permissions: ModPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) { //TODO whatever this does idk man
+			var post gcsql.Post
+			if request.FormValue("do") == "add" {
+				ip := request.FormValue("ip")
+				name := request.FormValue("name")
+				nameIsRegex := (request.FormValue("nameregex") == "on")
+				checksum := request.FormValue("checksum")
+				filename := request.FormValue("filename")
+				durationForm := request.FormValue("duration")
+				permaban := (durationForm == "" || durationForm == "0" || durationForm == "forever")
+				duration, err := gcutil.ParseDurationString(durationForm)
+				if err != nil {
+					return "", err
+				}
+				expires := time.Now().Add(duration)
+
+				boards := request.FormValue("boards")
+				reason := html.EscapeString(request.FormValue("reason"))
+				staffNote := html.EscapeString(request.FormValue("staffnote"))
+				currentStaff, _ := getCurrentStaff(request)
+
+				if filename != "" {
+					err = gcsql.CreateFileNameBan(filename, nameIsRegex, currentStaff, permaban, staffNote, boards)
+				}
+				if err != nil {
+					htmlOut += err.Error()
+					err = nil
+				}
+				if name != "" {
+					if err = gcsql.CreateUserNameBan(name, nameIsRegex, currentStaff, permaban, staffNote, boards); err != nil {
+						return "", err
+					}
+				}
+
+				if request.FormValue("fullban") == "on" {
+					err = gcsql.CreateUserBan(ip, false, currentStaff, boards, expires, permaban, staffNote, reason, true, time.Now())
+					if err != nil {
+						return "", err
+					}
+				} else {
+					if request.FormValue("threadban") == "on" {
+						err = gcsql.CreateUserBan(ip, true, currentStaff, boards, expires, permaban, staffNote, reason, true, time.Now())
+						if err != nil {
+							return "", err
+
+						}
+					}
+					if request.FormValue("imageban") == "on" {
+						err = gcsql.CreateFileBan(checksum, currentStaff, permaban, staffNote, boards)
+						if err != nil {
+							return "", err
+						}
+					}
+				}
+			}
+
+			if request.FormValue("postid") != "" {
+				var err error
+				post, err = gcsql.GetSpecificPostByString(request.FormValue("postid"))
+				if err != nil {
+					err = errors.New("Error getting post: " + err.Error())
+					return "", err
+				}
+			}
+
+			banlist, err := gcsql.GetAllBans()
+			if err != nil {
+				err = errors.New("Error getting ban list: " + err.Error())
+				return "", err
+			}
+			manageBansBuffer := bytes.NewBufferString("")
+
+			if err = gctemplates.ManageBans.Execute(manageBansBuffer,
+				map[string]interface{}{"config": config.Config, "banlist": banlist, "post": post},
+			); err != nil {
+				return "", errors.New("Error executing ban management page template: " + err.Error())
+			}
+			htmlOut += manageBansBuffer.String()
+			return
+		}},
+	"staffinfo": {
+		Permissions: NoPerms,
+		isJSON:      true,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			staff, err := getCurrentFullStaff(request)
+			if err != nil {
+				htmlOut, _ = gcutil.MarshalJSON(err, false)
+				return htmlOut, nil
+			}
+			return gcutil.MarshalJSON(staff, false)
+		}},
+	"boards": {
+		Title:       "Boards",
+		Permissions: AdminPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			do := request.FormValue("do")
+			var done bool
+			board := new(gcsql.Board)
+			var boardCreationStatus string
+
+			for !done {
+				switch {
+				case do == "add":
+					board.Dir = request.FormValue("dir")
+					if board.Dir == "" {
+						boardCreationStatus = `Error: "Directory" cannot be blank`
+						do = ""
+						continue
+					}
+					orderStr := request.FormValue("order")
+					if board.ListOrder, err = strconv.Atoi(orderStr); err != nil {
+						board.ListOrder = 0
+					}
+					board.Title = request.FormValue("title")
+					if board.Title == "" {
+						boardCreationStatus = `Error: "Title" cannot be blank`
+						do = ""
+						continue
+					}
+					board.Subtitle = request.FormValue("subtitle")
+					board.Description = request.FormValue("description")
+					sectionStr := request.FormValue("section")
+					if sectionStr == "none" {
+						sectionStr = "0"
+					}
+
+					board.CreatedOn = time.Now()
+					board.Section, err = strconv.Atoi(sectionStr)
+					if err != nil {
+						board.Section = 0
+					}
+					board.MaxFilesize, err = strconv.Atoi(request.FormValue("maximagesize"))
+					if err != nil {
+						board.MaxFilesize = 1024 * 4
+					}
+
+					board.MaxPages, err = strconv.Atoi(request.FormValue("maxpages"))
+					if err != nil {
+						board.MaxPages = 11
+					}
+
+					board.DefaultStyle = strings.Trim(request.FormValue("defaultstyle"), "\n")
+					board.Locked = (request.FormValue("locked") == "on")
+					board.ForcedAnon = (request.FormValue("forcedanon") == "on")
+
+					board.Anonymous = request.FormValue("anonymous")
+					if board.Anonymous == "" {
+						board.Anonymous = "Anonymous"
+					}
+
+					board.MaxAge, err = strconv.Atoi(request.FormValue("maxage"))
+					if err != nil {
+						board.MaxAge = 0
+					}
+
+					board.AutosageAfter, err = strconv.Atoi(request.FormValue("autosageafter"))
+					if err != nil {
+						board.AutosageAfter = 200
+					}
+
+					board.NoImagesAfter, err = strconv.Atoi(request.FormValue("noimagesafter"))
+					if err != nil {
+						board.NoImagesAfter = 0
+					}
+
+					board.MaxMessageLength, err = strconv.Atoi(request.FormValue("maxmessagelength"))
+					if err != nil {
+						board.MaxMessageLength = 1024 * 8
+					}
+
+					board.EmbedsAllowed = (request.FormValue("embedsallowed") == "on")
+					board.RedirectToThread = (request.FormValue("redirecttothread") == "on")
+					board.RequireFile = (request.FormValue("require_file") == "on")
+					board.EnableCatalog = (request.FormValue("enablecatalog") == "on")
+
+					//actually start generating stuff
+					if err = os.Mkdir(path.Join(config.Config.DocumentRoot, board.Dir), 0666); err != nil {
+						do = ""
+						boardCreationStatus = gclog.Printf(gclog.LStaffLog|gclog.LErrorLog, "Directory %s/%s/ already exists.",
+							config.Config.DocumentRoot, board.Dir)
+						break
+					}
+
+					if err = os.Mkdir(path.Join(config.Config.DocumentRoot, board.Dir, "res"), 0666); err != nil {
+						do = ""
+						boardCreationStatus = gclog.Printf(gclog.LStaffLog|gclog.LErrorLog, "Directory %s/%s/res/ already exists.",
+							config.Config.DocumentRoot, board.Dir)
+						break
+					}
+
+					if err = os.Mkdir(path.Join(config.Config.DocumentRoot, board.Dir, "src"), 0666); err != nil {
+						do = ""
+						boardCreationStatus = gclog.Printf(gclog.LStaffLog|gclog.LErrorLog, "Directory %s/%s/src/ already exists.",
+							config.Config.DocumentRoot, board.Dir)
+						break
+					}
+
+					if err = os.Mkdir(path.Join(config.Config.DocumentRoot, board.Dir, "thumb"), 0666); err != nil {
+						do = ""
+						boardCreationStatus = gclog.Printf(gclog.LStaffLog|gclog.LErrorLog, "Directory %s/%s/thumb/ already exists.",
+							config.Config.DocumentRoot, board.Dir)
+						break
+					}
+
+					if err = gcsql.CreateBoard(board); err != nil {
+						do = ""
+						boardCreationStatus = gclog.Print(gclog.LErrorLog, "Error creating board: ", err.Error())
+						break
+					} else {
+						boardCreationStatus = "Board created successfully"
+						building.BuildBoards(false)
+						gcsql.ResetBoardSectionArrays()
+						gclog.Print(gclog.LStaffLog, "Boards rebuilt successfully")
+						done = true
+					}
+				case do == "del":
+					// resetBoardSectionArrays()
+				case do == "edit":
+					// resetBoardSectionArrays()
+				default:
+					// put the default column values in the text boxes
+					board.Section = 1
+					board.MaxFilesize = 4718592
+					board.MaxPages = 11
+					board.DefaultStyle = "pipes.css"
+					board.Anonymous = "Anonymous"
+					board.AutosageAfter = 200
+					board.MaxMessageLength = 8192
+					board.EmbedsAllowed = true
+					board.EnableCatalog = true
+					board.Worksafe = true
+					board.ThreadsPerPage = config.Config.ThreadsPerPage
+				}
+
+				htmlOut = `<h1 class="manage-header">Manage boards</h1><form action="/manage?action=boards" method="POST"><input type="hidden" name="do" value="existing" /><select name="boardselect"><option>Select board...</option>`
+				var boards []string
+				boards, err = gcsql.GetBoardUris()
+				if err != nil {
+					err = errors.New(gclog.Print(gclog.LErrorLog,
+						"Error getting board list: ", err.Error()))
+					return "", err
+				}
+				for _, boardDir := range boards {
+					htmlOut += "<option>" + boardDir + "</option>"
+				}
+
+				htmlOut += `</select><input type="submit" value="Edit" /><input type="submit" value="Delete" /></form><hr />` +
+					`<h2 class="manage-header">Create new board</h2><span id="board-creation-message">` + boardCreationStatus + `</span><br />`
+
+				manageBoardsBuffer := bytes.NewBufferString("")
+				gcsql.AllSections, _ = gcsql.GetAllSectionsOrCreateDefault()
+
+				if err = gctemplates.ManageBoards.Execute(manageBoardsBuffer, map[string]interface{}{
+					"config":      config.Config,
+					"board":       board,
+					"section_arr": gcsql.AllSections,
+				}); err != nil {
+					err = errors.New(gclog.Print(gclog.LErrorLog,
+						"Error executing board management page template: ", err.Error()))
+					return "", err
+				}
+				htmlOut += manageBoardsBuffer.String()
+				return
+			}
+			gcsql.ResetBoardSectionArrays()
+			return
+		}},
+	"staffmenu": {
+		Title:       "Staff menu",
+		Permissions: JanitorPerms,
+	},
+	"rebuildfront": {
+		Title:       "Rebuild front page",
+		Permissions: AdminPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			if err = gctemplates.InitTemplates(); err != nil {
+				return "", err
+			}
+			return "Built front page successfully", building.BuildFrontPage()
+		}},
+	"rebuildall": {
+		Title:       "Rebuild everything",
+		Permissions: AdminPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			gctemplates.InitTemplates()
+			gcsql.ResetBoardSectionArrays()
+			if err = building.BuildFrontPage(); err != nil {
+				return "", err
+			}
+
+			if err = building.BuildBoardListJSON(); err != nil {
+				return "", err
+			}
+
+			if err = building.BuildBoards(false); err != nil {
+				return "", err
+			}
+
+			if err = building.BuildJS(); err != nil {
+				return "", err
+			}
+
+			return "", nil
+		}},
+	"rebuildboards": {
+		Title:       "Rebuild boards",
+		Permissions: AdminPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			if err = gctemplates.InitTemplates(); err != nil {
+				return "", err
+			}
+			return "Boards built successfully", building.BuildBoards(false)
+		}},
+	"reparsehtml": {
+		Title:       "Reparse HTML",
+		Permissions: AdminPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			messages, err := gcsql.GetAllNondeletedMessageRaw()
+			if err != nil {
+				return "", err
+			}
+
+			for i := range messages {
+				messages[i].Message = posting.FormatMessage(messages[i].MessageRaw)
+			}
+			if err = gcsql.SetFormattedInDatabase(messages); err != nil {
+				return "", err
+			}
+			htmlOut += "Done reparsing HTML<hr />"
+
+			if err = building.BuildFrontPage(); err != nil {
+				return "", err
+			}
+			htmlOut += "Done building front page<hr />"
+
+			if err = building.BuildBoardListJSON(); err != nil {
+				return "", err
+			}
+			htmlOut += "Done building board list JSON<hr />"
+
+			if err = building.BuildBoards(false); err != nil {
+				return "", err
+			}
+			htmlOut += "Done building boards<hr />"
+			return
+		}},
+	"recentposts": {
+		Title:       "Recent posts",
+		Permissions: JanitorPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			limit := request.FormValue("limit")
+			if limit == "" {
+				limit = "50"
+			}
+			htmlOut = `<h1 class="manage-header">Recent posts</h1>` +
+				`Limit by: <select id="limit">` +
+				`<option>25</option><option>50</option><option>100</option><option>200</option>` +
+				`</select><br /><table width="100%%d" border="1">` +
+				`<colgroup><col width="25%%" /><col width="50%%" /><col width="17%%" /></colgroup>` +
+				`<tr><th></th><th>Message</th><th>Time</th></tr>`
+			recentposts, err := gcsql.GetRecentPostsGlobal(gcutil.HackyStringToInt(limit), false) //only uses boardname, boardid, postid, parentid, message, ip and timestamp
+
+			if err != nil {
+				err = errors.New("Error getting recent posts: " + err.Error())
+				return "", err
+			}
+
+			for _, recentpost := range recentposts {
+				htmlOut += fmt.Sprintf(
+					`<tr><td><b>Post:</b> <a href="%s">%s/%d</a><br /><b>IP:</b> %s</td><td>%s</td><td>%s</td></tr>`,
+					path.Join(config.Config.SiteWebfolder, recentpost.BoardName, "/res/", strconv.Itoa(recentpost.ParentID)+".html#"+strconv.Itoa(recentpost.PostID)),
+					recentpost.BoardName, recentpost.PostID, recentpost.IP, string(recentpost.Message),
+					recentpost.Timestamp.Format("01/02/06, 15:04"),
+				)
+			}
+			htmlOut += "</table>"
+			return
+		}},
+	"postinfo": {
+		Title:       "Post info",
+		Permissions: ModPerms,
+		isJSON:      true,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			var post gcsql.Post
+			post, err = gcsql.GetSpecificPost(gcutil.HackyStringToInt(request.FormValue("postid")), false)
+			if err != nil {
+				htmlOut, _ = gcutil.MarshalJSON(err, false)
+				return htmlOut, nil
+			}
+			jsonStr, _ := gcutil.MarshalJSON(post, false)
+			return jsonStr, nil
+		}},
+	"staff": {
+		Title:       "Staff",
+		Permissions: AdminPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			var allStaff []gcsql.Staff
+			do := request.FormValue("do")
+			htmlOut = `<h1 class="manage-header">Staff</h1><br />` +
+				`<table id="stafftable" border="1">` +
+				"<tr><td><b>Username</b></td><td><b>Rank</b></td><td><b>Boards</b></td><td><b>Added on</b></td><td><b>Action</b></td></tr>"
+			allStaff, err = gcsql.GetAllStaffNopass()
+			if err != nil {
+				err = errors.New(
+					gclog.Print(gclog.LErrorLog, "Error getting staff list: ", err.Error()))
+				return "", err
+			}
+
+			for _, staff := range allStaff {
+				username := request.FormValue("username")
+				password := request.FormValue("password")
+				rank := request.FormValue("rank")
+				rankI, _ := strconv.Atoi(rank)
+				if do == "add" {
+					if err = gcsql.NewStaff(username, password, rankI); err != nil {
+						serverutil.ServeErrorPage(writer, gclog.Printf(gclog.LErrorLog,
+							"Error creating new staff account %q: %s", username, err.Error()))
+						return
+					}
+				} else if do == "del" && username != "" {
+					if err = gcsql.DeleteStaff(request.FormValue("username")); err != nil {
+						serverutil.ServeErrorPage(writer, gclog.Printf(gclog.LErrorLog,
+							"Error deleting staff account %q : %s", username, err.Error()))
+						return
+					}
+				}
+
+				switch {
+				case staff.Rank == 3:
+					rank = "admin"
+				case staff.Rank == 2:
+					rank = "mod"
+				case staff.Rank == 1:
+					rank = "janitor"
+				}
+				htmlOut += fmt.Sprintf(
+					`<tr><td>%s</td><td>%s</td><td>%s</td><td><a href="/manage?action=staff&amp;do=del&amp;username=%s" style="float:right;color:red;">X</a></td></tr>`,
+					staff.Username, rank, staff.AddedOn.Format(config.Config.DateTimeFormat), staff.Username)
+
+			}
+			htmlOut += `</table><hr /><h2 class="manage-header">Add new staff</h2>` +
+				`<form action="/manage?action=staff" onsubmit="return makeNewStaff();" method="POST">` +
+				`<input type="hidden" name="do" value="add" />` +
+				`Username: <input id="username" name="username" type="text" /><br />` +
+				`Password: <input id="password" name="password" type="password" /><br />` +
+				`Rank: <select id="rank" name="rank">` +
+				`<option value="3">Admin</option>` +
+				`<option value="2">Moderator</option>` +
+				`<option value="1">Janitor</option>` +
+				`</select><br />` +
+				`<input id="submitnewstaff" type="submit" value="Add" />` +
+				`</form>`
+			return
+		}},
+	"tempposts": {
+		Title:       "Temporary posts lists",
+		Permissions: AdminPerms,
+		Callback: func(writer http.ResponseWriter, request *http.Request) (htmlOut string, err error) {
+			htmlOut += `<h1 class="manage-header">Temporary posts</h1>`
+			if len(gcsql.TempPosts) == 0 {
+				htmlOut += "No temporary posts<br />"
+				return
+			}
+			for p, post := range gcsql.TempPosts {
+				htmlOut += fmt.Sprintf("Post[%d]: %#v<br />", p, post)
+			}
+			return
+		}},
+}