mirror of
https://github.com/p08dev/Bloggr.git
synced 2026-06-17 04:33:56 +02:00
162 lines
4.2 KiB
PHP
162 lines
4.2 KiB
PHP
<?php
|
|
include_once(__DIR__."/lib/autoload.php");
|
|
|
|
if (isset($_GET['new']) || isset($_GET['edit']) || isset($_POST['new']) || isset($_POST['edit'])) {
|
|
if (!$auth->hasRole([ \Bloggr\Roles::ADMIN, \Bloggr\Roles::AUTHOR ])) {
|
|
header('Location: /');
|
|
die();
|
|
}
|
|
}
|
|
|
|
$errors = [];
|
|
$action = '';
|
|
$data = [];
|
|
$success = false;
|
|
|
|
if (isset($_GET['view'])) {
|
|
if (isset($_POST['comment'])) {
|
|
$result = $auth->commentPost($_GET['view'], $_POST['comment']);
|
|
}
|
|
$result = $auth->getPost($_GET['view']);
|
|
$result_comments = $auth->getPostComments($_GET['view']);
|
|
if(!$result) {
|
|
array_push($errors, '404 Not Found');
|
|
} else {
|
|
$action = 'view';
|
|
$data = $result;
|
|
}
|
|
}
|
|
else if (isset($_GET['new'])) {
|
|
$action = 'new';
|
|
}
|
|
else if (isset($_GET['edit'])) {
|
|
$action = 'edit';
|
|
}
|
|
else {
|
|
array_push($errors, '404 Not Found');
|
|
}
|
|
|
|
if ($action == 'new' && isset($_POST['new'])) {
|
|
$result = $auth->newPost($_POST['title'], $_POST['text']);
|
|
|
|
if (is_array($result)) {
|
|
$errors = $result;
|
|
} else {
|
|
header("Location: /post.php?view=".$result);
|
|
}
|
|
}
|
|
|
|
$title = "";
|
|
$text = "";
|
|
|
|
if ($action == 'edit' && isset($_POST['edit'])) {
|
|
$result = $auth->editPost($_GET['edit'], $_POST['title'], $_POST['text']);
|
|
|
|
if (is_array($result)) {
|
|
$errors = $result;
|
|
} else {
|
|
$success = true;
|
|
}
|
|
}
|
|
|
|
if ($action == 'edit') {
|
|
$result = $auth->getPost($_GET['edit']);
|
|
if(!$result) {
|
|
array_push($errors, '404 Not Found');
|
|
} else {
|
|
$data = $result;
|
|
}
|
|
}
|
|
?>
|
|
<!DOCTYPE html>
|
|
<html>
|
|
<?php
|
|
$title = "Neuer Beitrag";
|
|
require_once(__DIR__."/inc/head.php");
|
|
?>
|
|
<body>
|
|
<?php require_once(__DIR__."/inc/nav.php"); ?>
|
|
<section class="main">
|
|
<a href="/">Zurück</a>
|
|
<?php
|
|
foreach ($errors as $key=>$value):
|
|
?>
|
|
<span style="color: red;">
|
|
<?= $value ?>
|
|
</span><br>
|
|
<?php
|
|
endforeach;
|
|
|
|
if($success == true) {
|
|
echo '<span style="color: green;">Post bearbeitet!</span><br>';
|
|
}
|
|
if ($action == 'view'):
|
|
?>
|
|
<h2><?= $data['title'] ?></h2>
|
|
<p><?= nl2br($data['text']) ?></p>
|
|
<p><small>von <?= $data['user'] ?> am <?= date('H:i d.m.Y', $data['created_at']) ?><br>
|
|
<?php
|
|
if($data['updated_by']):
|
|
?>
|
|
Zuletzt bearbeitet: <?= date('H:i d.m.Y',$data['updated_at']).' von '.$data['updated_by'] ?>
|
|
</small>
|
|
<?php
|
|
endif;
|
|
echo '</p>';
|
|
if ($auth->canEditPost($data["id"]) == true) echo '<a href="post.php?edit='.$data["id"].'">Edit Post</a>';
|
|
?>
|
|
<?php
|
|
if ($auth->isLoggedIn()) {
|
|
?>
|
|
<p>
|
|
<form action="<?= htmlspecialchars($_SERVER['REQUEST_URI']) ?>" method="post">
|
|
<textarea name="comment" id="comment" cols="30" rows="2"></textarea>
|
|
<input type="submit" value="Comment">
|
|
</form>
|
|
</p>
|
|
<?php
|
|
}
|
|
echo '<h3>Kommentare</h3>';
|
|
if(is_array($result_comments)) {
|
|
foreach($result_comments as $comment) {
|
|
?>
|
|
<p>
|
|
<b><?= $comment['user']; ?></b> am <?= date('H:i d.m.Y',$comment['created_at']) ?><br>
|
|
<?= $comment['comment']; ?>
|
|
</p>
|
|
<?php
|
|
}
|
|
}
|
|
|
|
endif;
|
|
|
|
if ($action == 'new'):
|
|
?>
|
|
<h2>Neuer Beitrag</h2>
|
|
<form action="<?= htmlspecialchars($_SERVER['REQUEST_URI']) ?>" method="post" class="clearfix">
|
|
<label for="title">Titel</label>
|
|
<input type="text" name="title" id="title" value="<?= (isset($_POST['title'])) ? htmlspecialchars($_POST['title']) : ''; ?>"><br>
|
|
<label for="text">Text</label>
|
|
<textarea rows="4" cols="50" name="text" id="text"><?= (isset($_POST['text'])) ? htmlspecialchars($_POST['text']) : ''; ?></textarea>
|
|
<input type="submit" name="new" value="new">
|
|
</form>
|
|
<?php
|
|
endif;
|
|
|
|
if ($action == 'edit' && (count($errors) <= 0)):
|
|
?>
|
|
<h2>Beitrag Bearbeiten</h2>
|
|
<form action="<?= htmlspecialchars($_SERVER['REQUEST_URI']) ?>" method="post" class="clearfix">
|
|
<label for="title">Titel</label>
|
|
<input type="text" name="title" id="title" value="<?= (isset($data['title'])) ? $data['title'] : $title; ?>"><br>
|
|
<label for="text">Text</label>
|
|
<textarea rows="4" cols="50" name="text" id="text"><?= (isset($data['text'])) ? $data['text'] : $text; ?></textarea>
|
|
<input type="submit" name="edit" value="edit">
|
|
</form>
|
|
<?php
|
|
endif;
|
|
?>
|
|
</section>
|
|
</body>
|
|
</html>
|