X-Git-Url: http://git.shiar.net/minimedit.git/blobdiff_plain/a66a71bc45f176c549f227ee843875f23b71e5e4..aee71926fef0a65076c0c40b4c3280506dec5aba:/edit/page/index.php diff --git a/edit/page/index.php b/edit/page/index.php index 48f8942..13ebd24 100644 --- a/edit/page/index.php +++ b/edit/page/index.php @@ -1,5 +1,5 @@ admin("edit $Page$Args")) +if (!$User->admin("edit {$Page->link}")) abort("geen beheersrechten", '401 unauthorised'); if ($_FILES) { @@ -7,7 +7,7 @@ if ($_FILES) { try { require_once('upload.inc.php'); $datadir = implode('/', ['data', date('Y')]); - if ($Args) $datadir .= $Args; + if ($Page->path) $datadir .= $Page->path; $target = userupload(@$_FILES['upload'], $datadir); if ($target) { $response['fileName'] = $_FILES['upload']['name']; @@ -42,10 +42,8 @@ if ($_FILES) { if (!$_POST) abort("niets te doen", '405 post error'); -if (!$Args) - abort("geen bestand aangeleverd", '409 input error'); -$filename = trim($Args, '/'); +$filename = trim($Page->path, '/') ?: 'index'; if (preg_match('{^\.}', $filename)) abort("ongeldige bestandsnaam: $filename", '403 input error'); if (is_dir($filename) && !file_exists("$filename.html"))