X-Git-Url: http://git.shiar.net/minimedit.git/blobdiff_plain/882347cba815e99ba8e7ad28d077420aa986e7c5..4486f69521f03fe56549394f13f7c529f57fa962:/edit/page/index.php

diff --git a/edit/page/index.php b/edit/page/index.php
index 1daed85..6c123af 100644
--- a/edit/page/index.php
+++ b/edit/page/index.php
@@ -1,17 +1,16 @@
 <?php
-ob_clean();
-
-if (!$User or !$User->admin)
+if (!$User->admin("edit {$Page->link}"))
 	abort("geen beheersrechten", '401 unauthorised');
 
 if ($_FILES) {
 	$response = ['uploaded' => 0];
 	try {
 		require_once('upload.inc.php');
-		$datadir = implode('/', ['data', date('Y')]);
-		if ($Args) $datadir .= $Args;
+		$datadir = implode('/', ['data', date('Y'), $User->login]);
+		if ($Page->path) $datadir .= $Page->path;
 		$target = userupload(@$_FILES['upload'], $datadir);
 		if ($target) {
+			$target = "/thumb/640x/$target";
 			$response['fileName'] = $_FILES['upload']['name'];
 			$response['url'] = str_replace('%2F', '/', urlencode($target));
 			$response['uploaded']++;
@@ -44,12 +43,13 @@ if ($_FILES) {
 
 if (!$_POST)
 	abort("niets te doen", '405 post error');
-if (!$Args)
-	abort("geen bestand aangeleverd", '409 input error');
 
-$filename = ltrim($Args, '/').'.html';
+$filename = trim($Page->path, '/') ?: 'index';
 if (preg_match('{^\.}', $filename))
 	abort("ongeldige bestandsnaam: $filename", '403 input error');
+if (is_dir($filename) && !file_exists("$filename.html"))
+	$filename .= '/index';
+$filename .= '.html';
 if (file_exists($filename) and !is_writable($filename))
 	abort("onwijzigbaar bestand: $filename", '403 input error');