1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
<?php /* Copyright (c) 2024 Freya Murphy */
class Blog_controller extends Controller {
public $comments_controller;
private $blog_model;
function __construct()
{
$this->blog_model = $this->load_model('blog');
$this->comments_controller = $this->load_controller('_comments');
}
public function index(): void
{
parent::index();
$data = $this->blog_model->get_data();
$this->view('header', $data);
$this->view('apps/blog', $data);
$this->view('footer', $data);
}
private function protect(string $folder, string $name): void
{
$basepath = ASSET_ROOT . '/' . $folder . '/';
$realBase = realpath($basepath);
$userpath = $basepath . $name . '.md';
$realUserPath = realpath($userpath);
if ($realUserPath === false || strpos($realUserPath, $realBase) !== 0) {
$this->error(404);
}
}
public function post($name): void
{
$this->protect('blog', $name);
parent::index();
$data = $this->blog_model->get_post($name);
if ($data === FALSE) {
$this->error(404);
}
$this->view('header', $data);
$this->view('apps/blog_post', $data);
$ref = "blog/post{$name}";
$this->comments_controller->comments($data['post']['meta']['name'], $ref);
$this->view('footer', $data);
}
public function writeup($name): void
{
$this->protect('writeup', $name);
parent::index();
$data = $this->blog_model->get_writeup($name);
if ($data === FALSE) {
$this->error(404);
}
$this->view('header', $data);
$this->view('apps/blog_writeup', $data);
$ref = "blog/writeup/{$name}";
$this->comments_controller->comments($data['post']['meta']['name'], $ref);
$this->view('footer', $data);
}
public function rss(): void
{
$data = $this->blog_model->get_data();
header('Content-Type: application/xml');
$this->view('apps/blog_rss', $data);
die();
}
}
?>
|
