1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
<?php /* Copyright (c) 2024 Freya Murphy */
class Blog_controller extends Controller {
public $comments_controller;
private $blog_model;
function __construct($load) {
parent::__construct($load);
$this->blog_model = $this->load->model('blog');
$this->comments_controller = $this->load->controller('_comments');
}
public function index(): void {
parent::index();
$data = $this->blog_model->get_data();
$this->view('header', $data);
$this->view('apps/blog', $data);
$this->view('footer', $data);
}
private function protect($folder) {
if (!array_key_exists('name', $_GET)) {
$this->error(400);
}
$basepath = $GLOBALS['assetroot'] . '/' . $folder . '/';
$realBase = realpath($basepath);
$userpath = $basepath . $_GET['name'];
$realUserPath = realpath($userpath);
if ($realUserPath === false || strpos($realUserPath, $realBase) !== 0) {
$this->error(404);
}
}
public function post(): void {
$this->protect('blog');
parent::index();
$data = $this->blog_model->get_post($_GET['name']);
if ($data === FALSE) {
$this->error(404);
}
$this->view('header', $data);
$this->view('apps/blog_post', $data);
$ref = 'blog/post?name=' . $_GET['name'];
$this->comments_controller->comments($data['post']['meta']['name'], $ref);
$this->view('footer', $data);
}
public function writeup(): void {
$this->protect('writeup');
parent::index();
$data = $this->blog_model->get_writeup($_GET['name']);
if ($data === FALSE) {
$this->error(404);
}
$this->view('header', $data);
$this->view('apps/blog_writeup', $data);
$ref = 'blog/writeup?name=' . $_GET['name'];
$this->comments_controller->comments($data['post']['meta']['name'], $ref);
$this->view('footer', $data);
}
public function rss() {
$data = $this->blog_model->get_data();
header('Content-Type: application/xml');
$this->view('apps/blog_rss', $data);
die();
}
}
?>
|
