getConnection(); $auth = new Auth($db); function h(string $value): string { return htmlspecialchars($value, ENT_QUOTES, 'UTF-8'); } function getCsrfToken(): string { if (empty($_SESSION['csrf_token'])) { $_SESSION['csrf_token'] = bin2hex(random_bytes(32)); } return $_SESSION['csrf_token']; } function ensurePostCsrf(): void { if ($_SERVER['REQUEST_METHOD'] === 'POST') { $token = $_POST['csrf_token'] ?? ''; if (!$token || !hash_equals($_SESSION['csrf_token'] ?? '', $token)) { http_response_code(400); echo 'Invalid CSRF token.'; exit; } } } function render_header(string $title, ?array $user, bool $showNav = true): void { ?> AdServer - <?php echo h($title); ?>
AdServer - Setup required

Database setup required

getMessage()); ?>

Import the schema.sql file into your MySQL database, then reload this page.

logout(); header('Location: ?page=login'); exit; } if ($installNeeded) { $page = 'install'; } if ($page === 'install') { $error = ''; if (!$installNeeded) { header('Location: ?page=login'); exit; } if ($_SERVER['REQUEST_METHOD'] === 'POST') { ensurePostCsrf(); $name = trim($_POST['full_name'] ?? ''); $email = trim($_POST['email'] ?? ''); $password = $_POST['password'] ?? ''; $password2 = $_POST['password_confirm'] ?? ''; if ($name === '' || $email === '' || $password === '') { $error = 'All fields are required.'; } elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) { $error = 'Invalid email address.'; } elseif ($password !== $password2) { $error = 'Passwords do not match.'; } else { AdServer::createAdmin($db, $name, $email, $password); header('Location: ?page=login'); exit; } } render_header('Install', null, false); ?>

Initial admin setup

Create the first administrator account for the ad server.

isLoggedIn()) { header('Location: ?page=dashboard'); exit; } if ($_SERVER['REQUEST_METHOD'] === 'POST') { ensurePostCsrf(); $email = trim($_POST['email'] ?? ''); $password = $_POST['password'] ?? ''; if ($email === '' || $password === '') { $error = 'Email and password are required.'; } elseif ($auth->login($email, $password)) { header('Location: ?page=dashboard'); exit; } else { $error = 'Invalid email or password.'; } } render_header('Login', null, false); ?>

Sign in

requireLogin(); $user = $auth->user(); switch ($page) { case 'dashboard': $totals = AdServer::getTotals($db); $impressions = $totals['impressions']; $clicks = $totals['clicks']; $revenue = $totals['revenue']; $ctr = $impressions > 0 ? ($clicks / $impressions) * 100.0 : 0.0; $ecpm = $impressions > 0 ? ($revenue / $impressions) * 1000.0 : 0.0; $topStats = AdServer::getSummaryStats($db); render_header('Dashboard', $user); ?>
Impressions
Clicks
CTR
%
eCPM
$

Top creatives

0 ? ($clk / $imp) * 100.0 : 0.0; $rowEcpm = $imp > 0 ? ($rev / $imp) * 1000.0 : 0.0; ?>
Advertiser Campaign Creative Zone Impressions Clicks CTR Revenue eCPM
No data yet.
% $ $
0) { $stmt = $db->prepare('UPDATE zones SET name = :name, slug = :slug, description = :description, width = :width, height = :height, is_responsive = :is_responsive, status = :status WHERE id = :id'); $stmt->execute([ 'name' => $name, 'slug' => $slug, 'description' => $description !== '' ? $description : null, 'width' => $width, 'height' => $height, 'is_responsive' => $is_responsive, 'status' => $status, 'id' => $id, ]); $message = 'Zone updated.'; } else { $stmt = $db->prepare('INSERT INTO zones (name, slug, description, width, height, is_responsive, status) VALUES (:name, :slug, :description, :width, :height, :is_responsive, :status)'); $stmt->execute([ 'name' => $name, 'slug' => $slug, 'description' => $description !== '' ? $description : null, 'width' => $width, 'height' => $height, 'is_responsive' => $is_responsive, 'status' => $status, ]); $message = 'Zone created.'; } } } if (isset($_GET['action'], $_GET['id']) && $_GET['action'] === 'toggle') { $zoneId = (int)$_GET['id']; $stmt = $db->prepare('SELECT status FROM zones WHERE id = :id'); $stmt->execute(['id' => $zoneId]); if ($zone = $stmt->fetch()) { $newStatus = $zone['status'] === 'active' ? 'inactive' : 'active'; $upd = $db->prepare('UPDATE zones SET status = :status WHERE id = :id'); $upd->execute(['status' => $newStatus, 'id' => $zoneId]); $message = 'Zone status updated.'; } } $editZone = null; if (isset($_GET['action'], $_GET['id']) && $_GET['action'] === 'edit') { $zoneId = (int)$_GET['id']; $stmt = $db->prepare('SELECT * FROM zones WHERE id = :id'); $stmt->execute(['id' => $zoneId]); $editZone = $stmt->fetch() ?: null; } $zonesStmt = $db->query('SELECT * FROM zones ORDER BY name ASC'); $zones = $zonesStmt->fetchAll(); render_header('Zones', $user); ?>

>

Existing zones

Name Slug Size Status Embed
No zones defined.
<div id="ad-"></div> <script async src="/serve.php?zone="></script> Edit Toggle
0) { $stmt = $db->prepare('UPDATE advertisers SET name = :name, contact_email = :contact_email, contact_phone = :contact_phone, website = :website WHERE id = :id'); $stmt->execute([ 'name' => $name, 'contact_email' => $contact_email, 'contact_phone' => $contact_phone !== '' ? $contact_phone : null, 'website' => $website !== '' ? $website : null, 'id' => $id, ]); $message = 'Advertiser updated.'; } else { $stmt = $db->prepare('INSERT INTO advertisers (name, contact_email, contact_phone, website) VALUES (:name, :contact_email, :contact_phone, :website)'); $stmt->execute([ 'name' => $name, 'contact_email' => $contact_email, 'contact_phone' => $contact_phone !== '' ? $contact_phone : null, 'website' => $website !== '' ? $website : null, ]); $message = 'Advertiser created.'; } } } $editAdvertiser = null; if (isset($_GET['action'], $_GET['id']) && $_GET['action'] === 'edit') { $advId = (int)$_GET['id']; $stmt = $db->prepare('SELECT * FROM advertisers WHERE id = :id'); $stmt->execute(['id' => $advId]); $editAdvertiser = $stmt->fetch() ?: null; } $advStmt = $db->query('SELECT * FROM advertisers ORDER BY name ASC'); $advertisers = $advStmt->fetchAll(); render_header('Advertisers', $user); ?>

Existing advertisers

Name Email Phone Website
No advertisers defined.
— Edit
query('SELECT id, name FROM advertisers ORDER BY name ASC'); $advertisers = $advStmt->fetchAll(); $zonesStmt = $db->query('SELECT id, name FROM zones WHERE status = "active" ORDER BY name ASC'); $zones = $zonesStmt->fetchAll(); if ($_SERVER['REQUEST_METHOD'] === 'POST') { ensurePostCsrf(); $id = isset($_POST['id']) ? (int)$_POST['id'] : 0; $name = trim($_POST['name'] ?? ''); $advertiser_id = isset($_POST['advertiser_id']) ? (int)$_POST['advertiser_id'] : 0; $status = $_POST['status'] ?? 'active'; $start_date = trim($_POST['start_date'] ?? ''); $end_date = trim($_POST['end_date'] ?? ''); $cpm_rate = $_POST['cpm_rate'] !== '' ? (float)$_POST['cpm_rate'] : 0.0; $total_budget = $_POST['total_budget'] !== '' ? (float)$_POST['total_budget'] : null; $impressions_purchased = $_POST['impressions_purchased'] !== '' ? (int)$_POST['impressions_purchased'] : null; $priority = $_POST['priority'] !== '' ? (int)$_POST['priority'] : 5; $zone_ids = isset($_POST['zones']) && is_array($_POST['zones']) ? array_map('intval', $_POST['zones']) : []; if ($name === '' || $advertiser_id <= 0) { $message = 'Name and advertiser are required.'; } else { if ($id > 0) { $stmt = $db->prepare('UPDATE campaigns SET advertiser_id = :advertiser_id, name = :name, status = :status, start_date = :start_date, end_date = :end_date, cpm_rate = :cpm_rate, total_budget = :total_budget, impressions_purchased = :impressions_purchased, priority = :priority WHERE id = :id'); $stmt->execute([ 'advertiser_id' => $advertiser_id, 'name' => $name, 'status' => in_array($status, ['active','paused','completed'], true) ? $status : 'active', 'start_date' => $start_date !== '' ? $start_date : null, 'end_date' => $end_date !== '' ? $end_date : null, 'cpm_rate' => $cpm_rate, 'total_budget' => $total_budget, 'impressions_purchased'=> $impressions_purchased, 'priority' => $priority, 'id' => $id, ]); $campaignId = $id; $message = 'Campaign updated.'; } else { $stmt = $db->prepare('INSERT INTO campaigns (advertiser_id, name, status, start_date, end_date, cpm_rate, total_budget, impressions_purchased, priority) VALUES (:advertiser_id, :name, :status, :start_date, :end_date, :cpm_rate, :total_budget, :impressions_purchased, :priority)'); $stmt->execute([ 'advertiser_id' => $advertiser_id, 'name' => $name, 'status' => in_array($status, ['active','paused','completed'], true) ? $status : 'active', 'start_date' => $start_date !== '' ? $start_date : null, 'end_date' => $end_date !== '' ? $end_date : null, 'cpm_rate' => $cpm_rate, 'total_budget' => $total_budget, 'impressions_purchased'=> $impressions_purchased, 'priority' => $priority, ]); $campaignId = (int)$db->lastInsertId(); $message = 'Campaign created.'; } $db->prepare('DELETE FROM zone_campaigns WHERE campaign_id = :cid')->execute(['cid' => $campaignId]); if ($zone_ids) { $zcStmt = $db->prepare('INSERT INTO zone_campaigns (zone_id, campaign_id) VALUES (:zone_id, :campaign_id)'); foreach ($zone_ids as $zid) { if ($zid > 0) { $zcStmt->execute(['zone_id' => $zid, 'campaign_id' => $campaignId]); } } } } } $editCampaign = null; $editZones = []; if (isset($_GET['action'], $_GET['id']) && $_GET['action'] === 'edit') { $cid = (int)$_GET['id']; $stmt = $db->prepare('SELECT * FROM campaigns WHERE id = :id'); $stmt->execute(['id' => $cid]); $editCampaign = $stmt->fetch() ?: null; if ($editCampaign) { $zc = $db->prepare('SELECT zone_id FROM zone_campaigns WHERE campaign_id = :cid'); $zc->execute(['cid' => $cid]); $editZones = array_column($zc->fetchAll(), 'zone_id'); } } $campaignsStmt = $db->query('SELECT c.*, a.name AS advertiser_name FROM campaigns c JOIN advertisers a ON a.id = c.advertiser_id ORDER BY c.created_at DESC'); $campaigns = $campaignsStmt->fetchAll(); render_header('Campaigns', $user); ?>

No zones defined.
>

Existing campaigns

Name Advertiser Status CPM Priority
No campaigns defined.
$ Edit
query('SELECT id, name FROM campaigns ORDER BY name ASC'); $campaigns = $campStmt->fetchAll(); if ($_SERVER['REQUEST_METHOD'] === 'POST') { ensurePostCsrf(); $id = isset($_POST['id']) ? (int)$_POST['id'] : 0; $campaign_id = isset($_POST['campaign_id']) ? (int)$_POST['campaign_id'] : 0; $name = trim($_POST['name'] ?? ''); $type = $_POST['type'] === 'html' ? 'html' : 'image'; $width = $_POST['width'] !== '' ? (int)$_POST['width'] : null; $height = $_POST['height'] !== '' ? (int)$_POST['height'] : null; $image_url = trim($_POST['image_url'] ?? ''); $click_url = trim($_POST['click_url'] ?? ''); $html_code = trim($_POST['html_code'] ?? ''); $status = $_POST['status'] === 'inactive' ? 'inactive' : 'active'; $hasUpload = ($type === 'image' && isset($_FILES['image_file']) && is_array($_FILES['image_file']) && ($_FILES['image_file']['error'] ?? UPLOAD_ERR_NO_FILE) !== UPLOAD_ERR_NO_FILE); if ($campaign_id <= 0 || $name === '') { $message = 'Campaign and name are required.'; } elseif ($type === 'image' && !$hasUpload && ($image_url === '' || $click_url === '')) { $message = 'Image URL and click URL are required for image creatives (or upload an image).'; } elseif ($type === 'html' && $html_code === '') { $message = 'HTML code is required for HTML creatives.'; } $uploadedImageUrl = null; if ($message === '' && $type === 'image' && $hasUpload) { if (!is_dir(UPLOAD_DIR)) { if (!mkdir(UPLOAD_DIR, 0755, true) && !is_dir(UPLOAD_DIR)) { $message = 'Upload directory could not be created.'; } } if ($message === '') { $fileError = $_FILES['image_file']['error'] ?? UPLOAD_ERR_NO_FILE; if ($fileError !== UPLOAD_ERR_OK) { $message = 'Image upload failed (error code ' . (int)$fileError . ').'; } else { $tmpName = $_FILES['image_file']['tmp_name'] ?? ''; $origName = $_FILES['image_file']['name'] ?? ''; if (!is_uploaded_file($tmpName)) { $message = 'Invalid upload.'; } else { $ext = strtolower(pathinfo($origName, PATHINFO_EXTENSION)); $allowedExt = ['jpg','jpeg','png','gif','webp']; if ($ext === '' || !in_array($ext, $allowedExt, true)) { $message = 'Unsupported image type. Allowed: jpg, jpeg, png, gif, webp.'; } else { $size = (int)($_FILES['image_file']['size'] ?? 0); if ($size <= 0 || $size > 5 * 1024 * 1024) { $message = 'Image file size must be between 1 byte and 5 MB.'; } else { $base = bin2hex(random_bytes(16)); $filename = $base . '.' . $ext; $dest = rtrim(UPLOAD_DIR, '/\\') . DIRECTORY_SEPARATOR . $filename; if (!move_uploaded_file($tmpName, $dest)) { $message = 'Failed to move uploaded file.'; } else { $uploadedImageUrl = rtrim(UPLOAD_URL, '/') . '/' . $filename; } } } } } } } if ($message === '') { if ($uploadedImageUrl !== null) { $image_url = $uploadedImageUrl; } if ($type === 'image') { $html_code = ''; } else { $image_url = ''; $click_url = ''; } if ($id > 0) { $stmt = $db->prepare('UPDATE creatives SET campaign_id = :campaign_id, name = :name, type = :type, width = :width, height = :height, image_url = :image_url, click_url = :click_url, html_code = :html_code, status = :status WHERE id = :id'); $stmt->execute([ 'campaign_id' => $campaign_id, 'name' => $name, 'type' => $type, 'width' => $width, 'height' => $height, 'image_url' => $image_url !== '' ? $image_url : null, 'click_url' => $click_url !== '' ? $click_url : null, 'html_code' => $html_code !== '' ? $html_code : null, 'status' => $status, 'id' => $id, ]); $message = 'Creative updated.'; } else { $stmt = $db->prepare('INSERT INTO creatives (campaign_id, name, type, width, height, image_url, click_url, html_code, status) VALUES (:campaign_id, :name, :type, :width, :height, :image_url, :click_url, :html_code, :status)'); $stmt->execute([ 'campaign_id' => $campaign_id, 'name' => $name, 'type' => $type, 'width' => $width, 'height' => $height, 'image_url' => $image_url !== '' ? $image_url : null, 'click_url' => $click_url !== '' ? $click_url : null, 'html_code' => $html_code !== '' ? $html_code : null, 'status' => $status, ]); $message = 'Creative created.'; } } } $editCreative = null; if (isset($_GET['action'], $_GET['id']) && $_GET['action'] === 'edit') { $cid = (int)$_GET['id']; $stmt = $db->prepare('SELECT * FROM creatives WHERE id = :id'); $stmt->execute(['id' => $cid]); $editCreative = $stmt->fetch() ?: null; } $creativesStmt = $db->query('SELECT c.*, camp.name AS campaign_name FROM creatives c JOIN campaigns camp ON camp.id = c.campaign_id ORDER BY c.created_at DESC'); $creatives = $creativesStmt->fetchAll(); render_header('Creatives', $user); ?>

Current image:

Existing creatives

Name Campaign Type Status
No creatives defined.
Edit

Performance reports

Aggregated statistics by advertiser, campaign, creative and zone.

0 ? ($clk / $imp) * 100.0 : 0.0; $rowEcpm = $imp > 0 ? ($rev / $imp) * 1000.0 : 0.0; ?>
Advertiser Campaign Creative Zone Impressions Clicks CTR Revenue eCPM
No data yet.
% $ $
Unknown page.