mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-06-25 16:19:19 +02:00
6f7a02244f
Extract shared filepond logic into src/FilepondHandler.php class. Admin filepond endpoints delegate to the handler after AdminAuth check. New partage filepond endpoints at /partage/actions/filepond/ verify share_active session flag + CSRF token, no admin auth required. JS reads filepond-base meta tag to determine endpoint path: - Admin pages: /admin/actions/filepond (via head.php isAdmin check) - Partage form: /partage/actions/filepond (explicit meta) partage/index.php sets share_active = true on form render, cleans up on successful submit. Partage process endpoint rate-limited to 30/5min per session. No nginx changes needed — /partage/ location already handles PHP without auth_basic.
92 lines
4.8 KiB
PHP
92 lines
4.8 KiB
PHP
<!DOCTYPE html>
|
||
<html lang="fr">
|
||
<head>
|
||
<meta charset="UTF-8">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||
<?php
|
||
// Admin: append suffix to title and prepend admin.css
|
||
if (!empty($isAdmin)) {
|
||
$pageTitle = isset($pageTitle) ? $pageTitle . ' – Admin' : 'Admin';
|
||
$extraCss = array_merge(['/assets/css/admin.css'], $extraCss ?? []);
|
||
}
|
||
?>
|
||
<title><?= htmlspecialchars($pageTitle ?? 'XAMXAM') ?></title>
|
||
<?php if (empty($isAdmin)): ?>
|
||
<?php if (!empty($metaDescription)): ?>
|
||
<meta name="description" content="<?= htmlspecialchars($metaDescription) ?>">
|
||
<?php endif; ?>
|
||
<?php
|
||
// Open Graph / Twitter Card tags — populated per-page via $ogTags array.
|
||
// Keys: type, title, description, url, image, image_alt, site_name, article_author, article_published_time
|
||
if (!empty($ogTags)):
|
||
$ogType = $ogTags['type'] ?? 'website';
|
||
$ogTitle = $ogTags['title'] ?? ($pageTitle ?? 'XAMXAM');
|
||
$ogDescription = $ogTags['description'] ?? ($metaDescription ?? '');
|
||
$ogUrl = $ogTags['url'] ?? '';
|
||
$ogImage = $ogTags['image'] ?? '';
|
||
$ogImageAlt = $ogTags['image_alt'] ?? $ogTitle;
|
||
$ogSiteName = $ogTags['site_name'] ?? 'XAMXAM – ERG';
|
||
?>
|
||
<meta property="og:type" content="<?= htmlspecialchars($ogType) ?>">
|
||
<meta property="og:site_name" content="<?= htmlspecialchars($ogSiteName) ?>">
|
||
<meta property="og:title" content="<?= htmlspecialchars($ogTitle) ?>">
|
||
<?php if (!empty($ogDescription)): ?>
|
||
<meta property="og:description" content="<?= htmlspecialchars($ogDescription) ?>">
|
||
<?php endif; ?>
|
||
<?php if (!empty($ogUrl)): ?>
|
||
<meta property="og:url" content="<?= htmlspecialchars($ogUrl) ?>">
|
||
<?php endif; ?>
|
||
<?php if (!empty($ogImage)): ?>
|
||
<meta property="og:image" content="<?= htmlspecialchars($ogImage) ?>">
|
||
<meta property="og:image:alt" content="<?= htmlspecialchars($ogImageAlt) ?>">
|
||
<?php endif; ?>
|
||
<?php if (!empty($ogTags['article_author'])): ?>
|
||
<meta property="article:author" content="<?= htmlspecialchars($ogTags['article_author']) ?>">
|
||
<?php endif; ?>
|
||
<?php if (!empty($ogTags['article_published_time'])): ?>
|
||
<meta property="article:published_time" content="<?= htmlspecialchars($ogTags['article_published_time']) ?>">
|
||
<?php endif; ?>
|
||
<meta name="twitter:card" content="<?= !empty($ogImage) ? 'summary_large_image' : 'summary' ?>">
|
||
<meta name="twitter:title" content="<?= htmlspecialchars($ogTitle) ?>">
|
||
<?php if (!empty($ogDescription)): ?>
|
||
<meta name="twitter:description" content="<?= htmlspecialchars($ogDescription) ?>">
|
||
<?php endif; ?>
|
||
<?php if (!empty($ogImage)): ?>
|
||
<meta name="twitter:image" content="<?= htmlspecialchars($ogImage) ?>">
|
||
<meta name="twitter:image:alt" content="<?= htmlspecialchars($ogImageAlt) ?>">
|
||
<?php endif; ?>
|
||
<?php endif; ?>
|
||
<?php endif; ?>
|
||
<link rel="apple-touch-icon" sizes="152x152" href="/assets/favicon/apple-touch-icon-152x152.png">
|
||
<link rel="apple-touch-icon" sizes="167x167" href="/assets/favicon/apple-touch-icon-167x167.png">
|
||
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon/apple-touch-icon-180x180.png">
|
||
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon/favicon-32x32.png">
|
||
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon/favicon-16x16.png">
|
||
<link rel="shortcut icon" href="/assets/favicon/favicon.ico">
|
||
<meta name="theme-color" content="#ffffff">
|
||
<?php if (!empty($_SESSION['csrf_token'])): ?>
|
||
<meta name="csrf-token" content="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
|
||
<?php endif; ?>
|
||
<?php if (!empty($isAdmin) || !empty($filepondBase)): ?>
|
||
<meta name="filepond-base" content="<?= htmlspecialchars($filepondBase ?? '/admin/actions/filepond') ?>">
|
||
<?php endif; ?>
|
||
<link rel="stylesheet" href="<?= App::assetV('/assets/css/modern-normalize.min.css') ?>">
|
||
<link rel="stylesheet" href="<?= App::assetV('/assets/css/common.css') ?>">
|
||
<?php foreach ($extraCss ?? [] as $css): ?>
|
||
<link rel="stylesheet" href="<?= App::assetV($css) ?>">
|
||
<?php endforeach; ?>
|
||
<?php foreach ($extraJs ?? [] as $js): ?>
|
||
<script src="<?= App::assetV($js) ?>" defer></script>
|
||
<?php endforeach; ?>
|
||
<?php if (php_sapi_name() === 'cli-server'): ?>
|
||
<script>
|
||
(function poll(){
|
||
fetch('/live-reload').then(r=>r.json()).then(d=>{
|
||
if(d.changed) location.reload(); else setTimeout(poll,1000);
|
||
}).catch(()=>setTimeout(poll,2000));
|
||
})();
|
||
</script>
|
||
<?php endif; ?>
|
||
</head>
|
||
<body class="<?= htmlspecialchars($bodyClass ?? '') ?>">
|