X-Git-Url: http://git.shiar.nl/minimedit.git/blobdiff_plain/b3aec6cf1cd18493d44cf68d88c8f55b6a417f9c..621fc2f9638a1a92aa8535310e7852de5542f11e:/edit/page/index.php diff --git a/edit/page/index.php b/edit/page/index.php index 086c753..8989dd5 100644 --- a/edit/page/index.php +++ b/edit/page/index.php @@ -1,5 +1,5 @@ admin("edit $Page$Args")) +if (!$User->admin("edit $Page$Args")) abort("geen beheersrechten", '401 unauthorised'); if ($_FILES) { @@ -45,9 +45,12 @@ if (!$_POST) if (!$Args) abort("geen bestand aangeleverd", '409 input error'); -$filename = ltrim($Args, '/').'.html'; +$filename = trim($Args, '/'); if (preg_match('{^\.}', $filename)) abort("ongeldige bestandsnaam: $filename", '403 input error'); +if (is_dir($filename) && !file_exists("$filename.html")) + $filename .= '/index'; +$filename .= '.html'; if (file_exists($filename) and !is_writable($filename)) abort("onwijzigbaar bestand: $filename", '403 input error');