X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=index.php;h=2ed14d4f2f3ac67ed6bd5e041fc434b27a7aa050;hb=383cbaf2c5a49f5fa54e635ed437d18784830afe;hp=427eb23941cc319840afc43d676795edaba345b7;hpb=b3051a6aae446e063c3b6fa4a6a600357a9f24af;p=github%2Fshaarli%2FShaarli.git diff --git a/index.php b/index.php index 427eb239..2ed14d4f 100644 --- a/index.php +++ b/index.php @@ -1316,21 +1316,21 @@ function renderPage($conf, $pluginManager, $LINKSDB) } // -------- User clicked the "Delete" button when editing a link: Delete link from database. - if (isset($_POST['delete_link'])) + if ($targetPage == Router::$PAGE_DELETELINK) { - if (!tokenOk($_POST['token'])) die('Wrong token.'); - // We do not need to ask for confirmation: // - confirmation is handled by JavaScript // - we are protected from XSRF by the token. - // FIXME! We keep `lf_linkdate` for consistency before a proper API. To be removed. - $id = isset($_POST['lf_id']) ? intval(escape($_POST['lf_id'])) : intval(escape($_POST['lf_linkdate'])); - - $pluginManager->executeHooks('delete_link', $LINKSDB[$id]); + if (! tokenOk($_GET['token'])) { + die('Wrong token.'); + } + $id = intval(escape($_GET['lf_linkdate'])); + $link = $LINKSDB[$id]; + $pluginManager->executeHooks('delete_link', $link); unset($LINKSDB[$id]); - $LINKSDB->save('resource.page_cache'); // save to disk + $LINKSDB->save($conf->get('resource.page_cache')); // save to disk // If we are called from the bookmarklet, we must close the popup: if (isset($_GET['source']) && ($_GET['source']=='bookmarklet' || $_GET['source']=='firefoxsocialapi')) { echo ''; exit; } @@ -1949,8 +1949,8 @@ function install($conf) $conf->set( 'api.secret', generate_api_secret( - $this->conf->get('credentials.login'), - $this->conf->get('credentials.salt') + $conf->get('credentials.login'), + $conf->get('credentials.salt') ) ); try { @@ -2231,8 +2231,8 @@ $app = new \Slim\App($container); // REST API routes $app->group('/api/v1', function() { - $this->get('/info', '\Api\Controllers\Info:getInfo'); -})->add('\Api\ApiMiddleware'); + $this->get('/info', '\Shaarli\Api\Controllers\Info:getInfo'); +})->add('\Shaarli\Api\ApiMiddleware'); $response = $app->run(true); // Hack to make Slim and Shaarli router work together: