X-Git-Url: http://git.shiar.nl/minimedit.git/blobdiff_plain/bb34842b36ded0bbe7e6f51294ad3d20c8d470da..772961fd4e9be46ad340cad1e55ee5f28cc5b968:/edit/page/index.php diff --git a/edit/page/index.php b/edit/page/index.php index 910b7c9..13ebd24 100644 --- a/edit/page/index.php +++ b/edit/page/index.php @@ -1,5 +1,5 @@ admin("edit $Page$Args")) +if (!$User->admin("edit {$Page->link}")) abort("geen beheersrechten", '401 unauthorised'); if ($_FILES) { @@ -7,7 +7,7 @@ if ($_FILES) { try { require_once('upload.inc.php'); $datadir = implode('/', ['data', date('Y')]); - if ($Args) $datadir .= $Args; + if ($Page->path) $datadir .= $Page->path; $target = userupload(@$_FILES['upload'], $datadir); if ($target) { $response['fileName'] = $_FILES['upload']['name']; @@ -43,7 +43,7 @@ if ($_FILES) { if (!$_POST) abort("niets te doen", '405 post error'); -$filename = trim($Args, '/') ?: 'index'; +$filename = trim($Page->path, '/') ?: 'index'; if (preg_match('{^\.}', $filename)) abort("ongeldige bestandsnaam: $filename", '403 input error'); if (is_dir($filename) && !file_exists("$filename.html"))