mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-05-06 19:19:19 +02:00
ca5983075d
- AdminLogger: JSON-lines → /var/log/xamxam.log (prod) / storage/logs/admin.log (dev) + best-effort DB mirror to admin_audit_log table - DB: admin_audit_log table, share_links.is_archived column - ShareLink: archive() replaces delete(), toggleActive() returns new state, listActive()/listArchived() split, validateLink blocks archived slugs - All action handlers wired: publish, unpublish, visibility, delete, csv/db export, tfe add/edit, tags, pages, apropos, form-help, access-request, maintenance, settings (formulaire toggles, objet types, smtp update), smtp-test - acces.php: archive button replaces delete; collapsible archived links section - setup-server.sh: provision /var/log/xamxam.log (www-data:xamxam 640)
38 lines
1.2 KiB
PHP
38 lines
1.2 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../../../bootstrap.php';
|
|
require_once __DIR__ . '/../../../src/AdminAuth.php';
|
|
AdminAuth::requireLogin();
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] !== 'POST'
|
|
|| !isset($_POST['csrf_token'], $_SESSION['csrf_token'])
|
|
|| !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
|
|
http_response_code(403);
|
|
die("Accès refusé.");
|
|
}
|
|
|
|
require_once APP_ROOT . '/src/AdminLogger.php';
|
|
|
|
$action = $_POST['action'] ?? '';
|
|
|
|
if ($action === 'enable_maintenance') {
|
|
file_put_contents(MAINTENANCE_FLAG, date('c'));
|
|
AdminLogger::make()->logMaintenance(true);
|
|
App::flash('success', "Mode maintenance activé.");
|
|
} elseif ($action === 'disable_maintenance') {
|
|
if (file_exists(MAINTENANCE_FLAG)) {
|
|
unlink(MAINTENANCE_FLAG);
|
|
}
|
|
AdminLogger::make()->logMaintenance(false);
|
|
App::flash('success', "Mode maintenance désactivé.");
|
|
} else {
|
|
App::flash('error', "Action inconnue.");
|
|
}
|
|
|
|
$redirect = isset($_POST['redirect']) ? $_POST['redirect'] : '/admin/';
|
|
// Allow only internal admin redirects for safety
|
|
if (!preg_match('#^/admin/#', $redirect)) {
|
|
$redirect = '/admin/';
|
|
}
|
|
header('Location: ' . $redirect);
|
|
exit();
|