mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-05-06 19:19:19 +02:00
467aced734
Phase 1: Consolidate shared infrastructure - Create shared/ directory for common code - Consolidate Database.php from front-backend and formulaire into unified shared/Database.php - Smart path detection for test.db vs posterg.db - Secure search with wildcard escaping and input validation - Support both singleton and direct instantiation patterns - Full CRUD methods for admin functionality - Move RateLimit.php to shared/ (30 requests/min) - Update all require paths across apps to use shared/ Phase 2: Reorganize directory structure - Rename front-backend/ → apps/public/ - Rename formulaire/ → apps/admin/ - Rename db/ → database/ - Update all file paths for new structure - Create root .gitignore excluding databases, cache, logs Implement secure search feature - Add apps/public/search.php with full-text search across theses - Search filters: query, year, orientation, AP program, keywords - Security features: - SQL injection prevention (prepared statements) - Wildcard injection prevention (escape % and _) - Input validation (max 200 chars, year range 1900-2100) - Rate limiting (30 req/min per IP) - Pagination limited to 100 results/page - XSS protection (htmlspecialchars on output) Add comprehensive test suite - Create apps/public/tests/ with proper structure - tests/Integration/SearchTest.php - 12 search scenarios - tests/Security/SecurityTest.php - vulnerability testing - tests/Unit/RateLimitTest.php - rate limit behavior - Create database/fixtures/CreateTestDatabase.php - Add apps/public/run-tests.php test runner - All tests passing (4/4 suites) Update deployment configuration - Rename justfile 'sync' recipe to 'deploy' - Create deploy group with separate deploy-public and deploy-admin - Add test-deploy recipe for test database - Exclude *.db, tests/, cache/, *.md from production deploy - Deploy shared/ to both public and admin locations Stats: +4482 insertions, -654 deletions across 72 files
87 lines
2.8 KiB
PHP
87 lines
2.8 KiB
PHP
<?php
|
|
ini_set('display_errors', 0);
|
|
ini_set('log_errors', 1);
|
|
ini_set('error_log', 'error.log');
|
|
|
|
require_once __DIR__ . '/../../shared/Database.php';
|
|
|
|
$page = isset($_GET['page']) ? intval($_GET['page']) : 1;
|
|
$itemsPerPage = 10;
|
|
|
|
try {
|
|
$db = Database::getInstance();
|
|
$offset = ($page - 1) * $itemsPerPage;
|
|
$itemsToLoad = $db->getPublishedTheses($itemsPerPage, $offset);
|
|
$totalItems = $db->countPublishedTheses();
|
|
$totalPages = ceil($totalItems / $itemsPerPage);
|
|
} catch (Exception $e) {
|
|
error_log("Error loading theses: " . $e->getMessage());
|
|
$itemsToLoad = [];
|
|
$totalPages = 0;
|
|
}
|
|
|
|
include 'inc/header.php'; ?>
|
|
|
|
<section class="section">
|
|
<div class="container">
|
|
<div class="columns is-multiline">
|
|
|
|
<?php foreach ($itemsToLoad as $item): ?>
|
|
<div class="column is-one-fifth">
|
|
<a href="memoire.php?id=<?= $item['id']; ?>" class="card-link">
|
|
<div class="card">
|
|
<?php
|
|
// Get cover image from thesis_files if available
|
|
$coverImage = null;
|
|
if (!empty($item['id'])) {
|
|
$files = $db->getThesisFiles($item['id']);
|
|
foreach ($files as $file) {
|
|
$ext = strtolower(pathinfo($file['file_path'], PATHINFO_EXTENSION));
|
|
if (in_array($ext, ['jpg', 'jpeg', 'png', 'gif']) && $file['file_type'] === 'main') {
|
|
$coverImage = $file['file_path'];
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
?>
|
|
<?php if ($coverImage): ?>
|
|
<div class="card-image">
|
|
<figure class="image ">
|
|
<img src="<?= htmlspecialchars($coverImage); ?>" alt="Image preview">
|
|
</figure>
|
|
</div>
|
|
<?php endif; ?>
|
|
<div class="card-content">
|
|
<h4 class="title is-4">
|
|
<?= htmlspecialchars($item['title']); ?>
|
|
</h4>
|
|
<h2 class="subtitle">
|
|
<?= htmlspecialchars($item['authors'] ?? 'Auteur inconnu'); ?>
|
|
</h2>
|
|
<h3 class="tag title is-6 is-link is-light">
|
|
<?= htmlspecialchars($item['year']); ?>
|
|
</h3>
|
|
<p class="block content">
|
|
<?php
|
|
$excerpt_length = 150;
|
|
$synopsis = $item['synopsis'] ?? '';
|
|
$description_excerpt = strlen($synopsis) > $excerpt_length
|
|
? substr($synopsis, 0, $excerpt_length) . '...'
|
|
: $synopsis;
|
|
?>
|
|
<?= htmlspecialchars($description_excerpt); ?>
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
</a>
|
|
</div>
|
|
<?php endforeach; ?>
|
|
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<?php
|
|
include 'inc/footer.php';
|
|
?>
|