X-Git-Url: http://git.shiar.net/minimedit.git/blobdiff_plain/a66a71bc45f176c549f227ee843875f23b71e5e4..4486f69521f03fe56549394f13f7c529f57fa962:/edit/page/index.php diff --git a/edit/page/index.php b/edit/page/index.php index 48f8942..6c123af 100644 --- a/edit/page/index.php +++ b/edit/page/index.php @@ -1,15 +1,16 @@ admin("edit $Page$Args")) +if (!$User->admin("edit {$Page->link}")) abort("geen beheersrechten", '401 unauthorised'); if ($_FILES) { $response = ['uploaded' => 0]; try { require_once('upload.inc.php'); - $datadir = implode('/', ['data', date('Y')]); - if ($Args) $datadir .= $Args; + $datadir = implode('/', ['data', date('Y'), $User->login]); + if ($Page->path) $datadir .= $Page->path; $target = userupload(@$_FILES['upload'], $datadir); if ($target) { + $target = "/thumb/640x/$target"; $response['fileName'] = $_FILES['upload']['name']; $response['url'] = str_replace('%2F', '/', urlencode($target)); $response['uploaded']++; @@ -42,10 +43,8 @@ if ($_FILES) { if (!$_POST) abort("niets te doen", '405 post error'); -if (!$Args) - abort("geen bestand aangeleverd", '409 input error'); -$filename = trim($Args, '/'); +$filename = trim($Page->path, '/') ?: 'index'; if (preg_match('{^\.}', $filename)) abort("ongeldige bestandsnaam: $filename", '403 input error'); if (is_dir($filename) && !file_exists("$filename.html"))