X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=index.php;h=dd70a989d897ebd5b6cbb51bb1e251818f51a779;hb=55821e04c188997d258645975220828e195d0df4;hp=cf1292443b403b89c4c576c98b2ab57f6bf35746;hpb=1ef1b9696a5067fedf79458af4fcb1eeb1a9a790;p=github%2Fwallabag%2Fwallabag.git diff --git a/index.php b/index.php old mode 100755 new mode 100644 index cf129244..dd70a989 --- a/index.php +++ b/index.php @@ -3,155 +3,66 @@ * poche, a read it later open source system * * @category poche - * @author Nicolas Lœuillet + * @author Nicolas Lœuillet * @copyright 2013 * @license http://www.wtfpl.net/ see COPYING file */ -/** - * TODO - * gestion des erreurs sqlite (duplicate tout ça) - * gérer si url vide - * traiter les variables passées en get - * récupérer le titre de la page pochée (cf readityourself.php) - * actions archive, fav et delete à traiter - * bookmarklet - * améliorer présentation des liens - * améliorer présentation d'un article - * aligner verticalement les icones d'action - * afficher liens mis en favoris et archivés - * tri des liens - */ -require_once dirname(__FILE__).'/inc/Readability.php'; -require_once dirname(__FILE__).'/inc/Encoding.php'; -include dirname(__FILE__).'/inc/functions.php'; - -try -{ - $db_handle = new PDO('sqlite:db/poche.sqlite'); - $db_handle->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); -} -catch (Exception $e) -{ - die('database error : '.$e->getMessage()); -} +include dirname(__FILE__).'/inc/poche/config.inc.php'; -$action = (isset ($_GET['action'])) ? htmlspecialchars($_GET['action']) : ''; -$view = (isset ($_GET['view'])) ? htmlspecialchars($_GET['view']) : ''; -$id = (isset ($_GET['id'])) ? htmlspecialchars($_GET['id']) : ''; +#XSRF protection with token +// if (!empty($_POST)) { +// if (!Session::isToken($_POST['token'])) { +// die(_('Wrong token')); +// } +// unset($_SESSION['tokens']); +// } -switch ($action) { - case 'add': - $url = (isset ($_GET['url'])) ? $_GET['url'] : ''; - $url = html_entity_decode(trim($url)); - $title = $url; - // if url use https protocol change it to http - if (!preg_match('!^https?://!i', $url)) $url = 'http://'.$url; - // convert page to utf-8 - $html = Encoding::toUTF8(get_external_file($url,15)); - if(isset($html) and strlen($html) > 0) { - // send result to readability library - $r = new Readability($html, $url); - if($r->init()) { - $title = $r->articleTitle->innerHTML; - } - } +$referer = empty($_SERVER['HTTP_REFERER']) ? '' : $_SERVER['HTTP_REFERER']; +$view = Tools::checkVar('view', 'home'); +$action = Tools::checkVar('action'); +$id = Tools::checkVar('id'); +$_SESSION['sort'] = Tools::checkVar('sort'); +$url = new Url((isset ($_GET['url'])) ? $_GET['url'] : ''); - $query = $db_handle->prepare('INSERT INTO entries ( url, title ) VALUES (?, ?)'); - $query->execute(array($url, $title)); - break; - case 'toggle_fav' : - $sql_action = "UPDATE entries SET is_fav=~is_fav WHERE id=?"; - $params_action = array($id); - break; - case 'toggle_archive' : - $sql_action = "UPDATE entries SET is_read=~is_read WHERE id=?"; - $params_action = array($id); - break; - case 'delete': - $sql_action = "DELETE FROM entries WHERE id=?"; - $params_action = array($id); - break; - default: - break; +if (isset($_GET['login'])) { + # hello you + $poche->login($referer); } - -try -{ - # action query - if (isset($sql_action)) { - $query = $db_handle->prepare($sql_action); - $query->execute($params_action); - } +elseif (isset($_GET['logout'])) { + # see you soon ! + $poche->logout(); } -catch (Exception $e) -{ - die('query error : '.$e->getMessage()); +elseif (isset($_GET['config'])) { + # Update password + $poche->updatePassword(); } - -switch ($view) { - case 'archive': - $sql = "SELECT * FROM entries WHERE is_read=?"; - $params = array(-1); - break; - case 'fav' : - $sql = "SELECT * FROM entries WHERE is_fav=?"; - $params = array(-1); - break; - default: - $sql = "SELECT * FROM entries WHERE is_read=?"; - $params = array(0); - break; +elseif (isset($_GET['import'])) { + $poche->import($_GET['from']); +} +elseif (isset($_GET['export'])) { + $poche->export(); } -# view query -try -{ - $query = $db_handle->prepare($sql); - $query->execute($params); - $entries = $query->fetchAll(); +$tpl_vars = array( + 'referer' => $referer, + 'view' => $view, + 'poche_url' => Tools::getPocheUrl(), + 'title' => _('poche, a read it later open source system'), + 'token' => Session::getToken(), +); + +if (Session::isLogged()) { + $poche->action($action, $url, $id); + $tpl_file = Tools::getTplFile($view); + $tpl_vars = array_merge($tpl_vars, $poche->displayView($view, $id)); } -catch (Exception $e) -{ - die('query error : '.$e->getMessage()); +else { + $tpl_file = 'login.twig'; } -?> - - - - - - - - - - - poche : queue - - - - -
-

logo pochepoche, a read it later open source system

-
- - - - \ No newline at end of file +# because messages can be added in $poche->action(), we have to add this entry now (we can add it before) +$tpl_vars = array_merge($tpl_vars, array('messages' => $poche->messages->display())); + +# Aaaaaaand action ! +echo $poche->tpl->render($tpl_file, $tpl_vars); \ No newline at end of file