login: log authenticated user in apache note

[minimedit.git] / edit.php

diff --git a/edit.php b/edit.php
index 1b81ccf2aa8f4242dbcdddeaecd7d7636c5e17f7..ca9639c3da44f2049cf14bb2318ec1be0b919b34 100644 (file)
--- a/edit.php
+++ b/edit.php
@@ -10,6 +10,27 @@ function abort($body, $status = NULL) {
 if (!@$User['admin'])
        abort("geen beheersrechten", '401 unauthorised');
 
+if ($_FILES) {
+       $img = @$_FILES['upload'];
+       if (!$img or $img['error'] !== UPLOAD_ERR_OK)
+               abort('bestand niet goed ontvangen: '.$img['error'], '409 upload error');
+
+       $datadir = 'data/' . date('Y');
+       $target = $datadir.'/'.$img['name'];
+       move_uploaded_file($img['tmp_name'], $target);
+
+       switch (@$_GET['output']) {
+       case 'ckescript':
+               printf('<script>window.parent.CKEDITOR.tools.callFunction(%s)</script>',
+                       "{$_GET['CKEditorFuncNum']}, '$target'"
+               );
+               break;
+       default:
+               abort($target);
+       }
+       exit;
+}
+
 if (!$_POST)
        abort("niets te doen", '405 post error');
 if (!$Args)