X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=index.php;h=81bd017449be7a7f7c260288eb93a459c269d649;hb=2b840e0cfb63a453bea67a98541f3df9c273c5f5;hp=d89fa41c3bc2ff5d4125797824c326695fc8d12b;hpb=bf1be2bf4971688dfe925699c3797dac319cd4b8;p=github%2Fwallabag%2Fwallabag.git diff --git a/index.php b/index.php old mode 100755 new mode 100644 index d89fa41c..81bd0174 --- a/index.php +++ b/index.php @@ -3,104 +3,95 @@ * poche, a read it later open source system * * @category poche - * @author Nicolas Lœuillet + * @author Nicolas Lœuillet * @copyright 2013 * @license http://www.wtfpl.net/ see COPYING file */ -/** - * TODO - * gestion des erreurs sqlite (duplicate tout ça) - * gérer si url vide - * traiter les variables passées en get - * récupérer le titre de la page pochée (cf readityourself.php) - * actions archive, fav et delete à traiter - * bookmarklet - * améliorer présentation des liens - * améliorer présentation d'un article - * aligner verticalement les icones d'action - * afficher liens mis en favoris et archivés - * tri des liens - */ +include dirname(__FILE__).'/inc/config.php'; -try -{ - $db_handle = new PDO('sqlite:poche.sqlite'); - $db_handle->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); -} -catch (Exception $e) -{ - die('error : '.$e->getMessage()); +$errors = array(); + +# XSRF protection with token +if (!empty($_POST)) { + if (!Session::isToken($_POST['token'])) { + #die(_('Wrong token')); + // TODO CORRIGER ICI !!! + } + unset($_SESSION['tokens']); } -$action = (isset ($_GET['action'])) ? htmlspecialchars($_GET['action']) : ''; +$referer = empty($_SERVER['HTTP_REFERER']) ? '' : $_SERVER['HTTP_REFERER']; + +if (isset($_GET['login'])) { + if (!empty($_POST['login']) && !empty($_POST['password'])) { + if (Session::login($_SESSION['login'], $_SESSION['pass'], $_POST['login'], encode_string($_POST['password'] . $_POST['login']))) { + pocheTools::logm('login successful'); + $errors[]['value'] = _('login successful'); -switch ($action) { - case 'add': - $url = (isset ($_GET['url'])) ? htmlspecialchars($_GET['url']) : ''; - $title = $url; - $query = $db_handle->prepare('INSERT INTO entries ( url, title ) VALUES (?, ?)'); - $query->execute(array($url, $title)); - break; - case 'archive': - break; - case 'fav' : - break; - case 'delete': - break; - default: - break; + if (!empty($_POST['longlastingsession'])) { + $_SESSION['longlastingsession'] = 31536000; + $_SESSION['expires_on'] = time() + $_SESSION['longlastingsession']; + session_set_cookie_params($_SESSION['longlastingsession']); + } else { + session_set_cookie_params(0); // when browser closes + } + session_regenerate_id(true); + pocheTools::redirect($referer); + } + pocheTools::logm('login failed'); + $errors[]['value'] = _('Login failed !'); + } else { + pocheTools::logm('login failed'); + } +} +elseif (isset($_GET['logout'])) { + pocheTools::logm('logout'); + Session::logout(); + pocheTools::redirect(); } +elseif (isset($_GET['config'])) { + if (isset($_POST['password']) && isset($_POST['password_repeat'])) { + if ($_POST['password'] == $_POST['password_repeat'] && $_POST['password'] != "") { + pocheTools::logm('password updated'); + if (!MODE_DEMO) { + $store->updatePassword(encode_string($_POST['password'] . $_SESSION['login'])); + #your password has been updated + } + else { + #in demo mode, you can\'t update password + } + } + #else + #your password can\'t be empty and you have to repeat it in the second field + } +} + +# Traitement des paramètres et déclenchement des actions +$view = (isset ($_REQUEST['view'])) ? htmlentities($_REQUEST['view']) : 'home'; +$full_head = (isset ($_REQUEST['full_head'])) ? htmlentities($_REQUEST['full_head']) : 'yes'; +$action = (isset ($_REQUEST['action'])) ? htmlentities($_REQUEST['action']) : ''; +$_SESSION['sort'] = (isset ($_REQUEST['sort'])) ? htmlentities($_REQUEST['sort']) : 'id'; +$id = (isset ($_REQUEST['id'])) ? htmlspecialchars($_REQUEST['id']) : ''; +$url = (isset ($_GET['url'])) ? $_GET['url'] : ''; + +$tpl_vars = array( + 'referer' => $referer, + 'view' => $view, + 'poche_url' => pocheTools::getUrl(), + 'demo' => MODE_DEMO, + 'title' => _('poche, a read it later open source system'), + 'token' => Session::getToken(), + 'errors' => $errors, +); -function url(){ - $protocol = "http"; - if(isset($_SERVER['HTTPS'])) - if($_SERVER['HTTPS'] != "off") - $protocol = "https"; - - return $protocol . "://" . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']; +if (Session::isLogged()) { + action_to_do($action, $url, $id); + $tpl_file = get_tpl_file($view); + $tpl_vars = array_merge($tpl_vars, display_view($view, $id)); } -?> - - - - - - - - - - - poche : queue - - - - -
-

poche, a read it later open source system

-
-
- - prepare("SELECT * FROM entries WHERE read=?"); - $query->execute(array('FALSE')); - $entries = $query->fetchAll(); - ?> - -
- - - \ No newline at end of file +else { + $tpl_file = 'login.twig'; +} + +echo $twig->render($tpl_file, $tpl_vars); \ No newline at end of file