mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-05-06 11:09:18 +02:00
592b1183db
All admin action files (account, tag, page, edit, visibility, maintenance,
publish, formulaire) now call App::flash('error'|'success', ...) instead of
writing to raw per-page session keys ($_SESSION['error'], 'admin_error',
'edit_error', 'admin_success', 'edit_success', 'form_error').
All admin display pages (add, edit, account, tags, pages, index) now include
templates/partials/flash-messages.php instead of manually reading and
unsetting the legacy session keys and inlining their own alert HTML.
App::consumeFlash() already drained all legacy key variants as a safety net,
so the partial works correctly whether called from pages that were already
migrated or any remaining stragglers. No behaviour change for end users.
29 lines
843 B
PHP
29 lines
843 B
PHP
<?php
|
|
require_once __DIR__ . '/../../../config/bootstrap.php';
|
|
require_once __DIR__ . '/../../../src/AdminAuth.php';
|
|
AdminAuth::requireLogin();
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] !== 'POST'
|
|
|| !isset($_POST['csrf_token'], $_SESSION['csrf_token'])
|
|
|| !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
|
|
http_response_code(403);
|
|
die("Accès refusé.");
|
|
}
|
|
|
|
$action = $_POST['action'] ?? '';
|
|
|
|
if ($action === 'enable_maintenance') {
|
|
file_put_contents(MAINTENANCE_FLAG, date('c'));
|
|
App::flash('success', "Mode maintenance activé.");
|
|
} elseif ($action === 'disable_maintenance') {
|
|
if (file_exists(MAINTENANCE_FLAG)) {
|
|
unlink(MAINTENANCE_FLAG);
|
|
}
|
|
App::flash('success', "Mode maintenance désactivé.");
|
|
} else {
|
|
App::flash('error', "Action inconnue.");
|
|
}
|
|
|
|
header('Location: /admin/');
|
|
exit();
|