mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-05-07 03:29:19 +02:00
ca5983075d
- AdminLogger: JSON-lines → /var/log/xamxam.log (prod) / storage/logs/admin.log (dev) + best-effort DB mirror to admin_audit_log table - DB: admin_audit_log table, share_links.is_archived column - ShareLink: archive() replaces delete(), toggleActive() returns new state, listActive()/listArchived() split, validateLink blocks archived slugs - All action handlers wired: publish, unpublish, visibility, delete, csv/db export, tfe add/edit, tags, pages, apropos, form-help, access-request, maintenance, settings (formulaire toggles, objet types, smtp update), smtp-test - acces.php: archive button replaces delete; collapsible archived links section - setup-server.sh: provision /var/log/xamxam.log (www-data:xamxam 640)
82 lines
2.9 KiB
PHP
82 lines
2.9 KiB
PHP
<?php
|
|
/**
|
|
* Student-access link actions (create, toggle, set_password, archive).
|
|
*/
|
|
require_once __DIR__ . '/../../../bootstrap.php';
|
|
require_once __DIR__ . '/../../../src/AdminAuth.php';
|
|
require_once __DIR__ . '/../../../src/ShareLink.php';
|
|
require_once __DIR__ . '/../../../src/AdminLogger.php';
|
|
|
|
App::adminGuard();
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] !== 'POST'
|
|
|| !isset($_POST['csrf_token'], $_SESSION['csrf_token'])
|
|
|| !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
|
|
http_response_code(403);
|
|
exit('CSRF token invalide.');
|
|
}
|
|
|
|
$action = $_POST['action'] ?? '';
|
|
$id = isset($_POST['id']) ? intval($_POST['id']) : 0;
|
|
$shareLink = ShareLink::make();
|
|
$logger = AdminLogger::make();
|
|
|
|
switch ($action) {
|
|
case 'create':
|
|
$password = !empty($_POST['password']) ? trim($_POST['password']) : null;
|
|
$expiresRaw = !empty($_POST['expires_at']) ? trim($_POST['expires_at']) : null;
|
|
$expiresAt = null;
|
|
if ($expiresRaw) {
|
|
$expiresAt = date('Y-m-d H:i:s', strtotime($expiresRaw));
|
|
if ($expiresAt <= date('Y-m-d H:i:s')) {
|
|
App::redirect('/admin/acces.php', error: "La date d'expiration doit être dans le futur.");
|
|
}
|
|
}
|
|
$objetRaw = $_POST['objet_restriction'] ?? '';
|
|
$objetRestriction = in_array($objetRaw, ['tfe', 'thèse', 'frart'], true) ? $objetRaw : null;
|
|
$link = $shareLink->create(1, $password, $expiresAt, $objetRestriction);
|
|
$logger->logLinkCreate(
|
|
$link['slug'] ?? '',
|
|
$password !== null,
|
|
$expiresAt,
|
|
$objetRestriction
|
|
);
|
|
App::redirect('/admin/acces.php', success: 'Lien d\'accès créé.');
|
|
break;
|
|
|
|
case 'toggle':
|
|
if ($id > 0) {
|
|
$nowActive = $shareLink->toggleActive($id);
|
|
$logger->logLinkToggle($id, $nowActive);
|
|
App::redirect('/admin/acces.php', success: 'Statut du lien modifié.');
|
|
} else {
|
|
App::redirect('/admin/acces.php', error: 'Lien introuvable.');
|
|
}
|
|
break;
|
|
|
|
case 'set_password':
|
|
if ($id > 0) {
|
|
$password = isset($_POST['password']) && $_POST['password'] !== '' ? trim($_POST['password']) : null;
|
|
$shareLink->setPassword($id, $password);
|
|
$logger->logLinkPasswordChange($id, $password === null);
|
|
App::redirect('/admin/acces.php', success: 'Mot de passe mis à jour.');
|
|
} else {
|
|
App::redirect('/admin/acces.php', error: 'Lien introuvable.');
|
|
}
|
|
break;
|
|
|
|
case 'archive':
|
|
if ($id > 0) {
|
|
$shareLink->archive($id);
|
|
$logger->logLinkArchive($id);
|
|
App::redirect('/admin/acces.php', success: 'Lien archivé.');
|
|
} else {
|
|
App::redirect('/admin/acces.php', error: 'Lien introuvable.');
|
|
}
|
|
break;
|
|
|
|
default:
|
|
App::redirect('/admin/acces.php', error: 'Action inconnue.');
|
|
break;
|
|
}
|