X-Git-Url: http://git.shiar.nl/minimedit.git/blobdiff_plain/ee9702f9ff640f0108e52490d256c789acb09433..9887bd21eb0d0d7211b3add639c8e92ed0d8701f:/foto/index.php

diff --git a/foto/index.php b/foto/index.php
index 7df1d5c..e7f1bab 100644
--- a/foto/index.php
+++ b/foto/index.php
@@ -6,7 +6,7 @@ $nav[0] = "Foto's"; # override of root 'foto'
 $title = array_pop($nav);
 $Page->title = ($nav ? implode(' ', $nav) . ': ' : '') . $title;
 
-if (!$User) {
+if ($Page->api) {
 	$img = "$rootdir/index.jpg";
 	if (file_exists($img)) {
 		# cover image of current album
@@ -48,60 +48,55 @@ if (isset($Page->raw)) {
 	print $Page->raw;  # page intro
 }
 
-if (!function_exists('showthumb')) {
-function showthumb($path)
-{
-	// assume all album entries are symlinks to archive originals
-	$target = preg_replace('{^(\.\./)*}', '', readlink($path));
-	$thumb = 'thumb/262/' . $target;
-
-	@list ($order, $size, $title) = explode(':', pathinfo($path, PATHINFO_FILENAME), 3);
-	$imgtag = 'img src="/'.$thumb.'"';
-	if ($title) {
-		$imgtag .= ' title="'.htmlspecialchars(urldecode($title)).'"';
-	}
-	if ($size) {
-		$imgtag .= ' data-size="'.$size.'"';
-	}
-
-	return sprintf('<a href="/%s"><%s /></a>'."\n", $target, $imgtag);
-}
-}
-
 if ($imgs = glob("$rootdir/*", GLOB_ONLYDIR)) {
 	natsort($imgs);
 	print '<ul class="gallery cat">'."\n";
 	foreach ($imgs as $path) {
-		$parts = pathinfo($path);
-		$album = $parts['filename'];
+		$album = htmlspecialchars(pathinfo($path, PATHINFO_FILENAME));
 		$cover = "$path/index.jpg";
 		if (!file_exists($cover)) $cover = 'foto/index.jpg';
 		if (is_link($cover)) {
 			$cover = preg_replace('{^(?:\.\./)*(?=data/)}', 'thumb/100/', readlink($cover));
 		}
 
-		$html = '<img src="/'.$cover.'" />';
+		$html = sprintf('<img src="/%s" />', htmlspecialchars($cover));
 		$html .= "<figcaption>$album</figcaption>";
 		if (!$User->login and file_exists("$path/.private")) {
 			$html = '<s title="bewoners">'.$html.'</s>';
 		}
 		$html = "<figure>$html</figure>";
 
-		printf('<li id="%s"><a href="%s">%s</a>'."\n", $album, "/$path", $html);
+		printf('<li id="%s">', $album);
+		printf('<a href="/%s">%s</a>'."\n", htmlspecialchars($path), $html);
 	}
 	print "</ul>\n\n";
 }
 
 if ($imgs = glob("$rootdir/*.jpg")) {
 	print '<ul class="gallery album">'."\n";
-	foreach ($imgs as $img) {
-		if ($img == "$rootdir/index.jpg") {
+	foreach ($imgs as $path) {
+		if ($path == "$rootdir/index.jpg") {
 			# cover image of current album
-			$Page->image = "/$img";
+			$Page->image = "/$path";
 			continue;
 		}
-		if (!is_link($img)) continue;
-		print '<li>'.showthumb($img);
+		if (!is_link($path)) continue;
+
+		// assume all album entries are symlinks to archive originals
+		$target = preg_replace('{^(\.\./)*}', '', readlink($path));
+		$thumb = 'thumb/262/' . $target;
+
+		@list ($order, $size, $title) = explode(':', pathinfo($path, PATHINFO_FILENAME), 3);
+		$imgtag = 'img src="/'.$thumb.'"';
+		if ($title) {
+			$imgtag .= ' title="'.htmlspecialchars(urldecode($title)).'"';
+		}
+		if ($size) {
+			$imgtag .= ' data-size="'.$size.'"';
+		}
+
+		print '<li>';
+		printf('<a href="/%s"><%s /></a>'."\n", $target, $imgtag);
 	}
 	print '</ul>'."\n\n";