X-Git-Url: http://git.shiar.net/minimedit.git/blobdiff_plain/62b5ff32fa1e2ad7361940351bd6585b9dfcbd9a..effb5f39f873af6e83f65ec3bce4c6d6b3a0fac3:/page.php diff --git a/page.php b/page.php index ba58306..35a810a 100644 --- a/page.php +++ b/page.php @@ -2,60 +2,10 @@ error_reporting(E_ALL); ini_set('display_errors', TRUE); -function abort($body, $status = NULL) { - if ($status) header("HTTP/1.1 $status"); - print "$body\n"; - exit; -} - -# custom error handling - define('DOCROOT', getcwd()); set_include_path(implode(PATH_SEPARATOR, [ DOCROOT, __DIR__ ])); -function fail($error) -{ - global $User, $Page; - http_response_code(500); - if (!isset($Page)) { - require_once('article.inc.php'); - $Page = new ArchiveArticle(NULL); - $Page->title = 'Fout'; - } - include_once 'page.inc.php'; - - ob_start(); - require '500.inc.html'; - $Page->place['debug'] = htmlspecialchars($error); - $Page->raw = ob_get_clean(); - print $Page->render(); -} - -set_exception_handler('fail'); - -define('E_FATAL', E_ERROR | E_CORE_ERROR | E_COMPILE_ERROR | E_USER_ERROR); - -set_error_handler(function ($level, $error, $file, $line) { - if ($level & E_FATAL) { - fail($error); - return; - } - return FALSE; -}); - -register_shutdown_function(function () { - # display failure page for fatal exceptions - $error = error_get_last(); - if (!($error['type'] & E_FATAL)) return; - fail("Fatal: $error[message] in $error[file]:$error[line]"); -}); - -error_reporting(error_reporting() & ~E_FATAL); - -# user login and control - -include_once 'auth.inc.php'; // sets global $User -$Edit = isset($_GET['edit']); +include_once 'error.inc.php'; # setup requested page @@ -78,6 +28,10 @@ elseif (file_exists("$request/index.html")) { require_once('article.inc.php'); $Page = new ArchiveArticle($staticpage); +# user login and control + +include_once 'auth.inc.php'; // sets global $User + if ($Page->restricted) { # access restriction if (!$User->login) { @@ -92,7 +46,7 @@ if ($Page->restricted) { header(sprintf('Content-Security-Policy: %s', implode('; ', [ "default-src 'self' 'unsafe-inline' http://cdn.ckeditor.com", # some overrides remain - "img-src 'self' data: http://cdn.ckeditor.com", # inline svg (in css) + "img-src 'self' data: blob: http://cdn.ckeditor.com", # inline svg (in css) "base-uri 'self'", # only local pages "frame-ancestors 'none'", # prevent malicious embedding ]))); @@ -102,33 +56,18 @@ $Page->place += [ 'url' => htmlspecialchars($_SERVER['REQUEST_URI']), ]; -if (!isset($Page->raw) and $User->admin("edit {$Page->link}")) { - # open bottom template as initial contents - $template = 'template.inc.html'; - if ($Page->handler and file_exists("{$Page->handler}/$template")) { - $template = "{$Page->handler}/$template"; - } - $Page->raw($template); - $Page->meta['article:published_time'] = date('Y-m-d h:i:s O'); - $Page->meta['article:author'] = '/' . $User->dir; - $Page->body = NULL; +if ($User->admin("edit {$Page->link}")) { + include_once 'edit/head.inc.php'; } if (isset($Page->raw)) { - if ($User->admin("edit {$Page->link}")) { - # restore meta tags in static contents for editing - foreach (array_reverse($Page->meta) as $metaprop => $val) { - $Page->raw = sprintf( - ''."\n", - $metaprop, $val - ) . $Page->raw; - } - } $Page->raw = '
'."\n\n".$Page->raw."
\n\n"; } # output dynamic and/or static html +include_once 'format.inc.php'; + ob_start(); if ($Page->handler and !require("./{$Page->handler}/index.php")) { # replace contents by code output on false return