mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-05-07 03:29:19 +02:00
f4aba500e6
- add hidden student_mode field in add.php form - pass mode=student through redirect to thanks.php in formulaire.php - thanks.php renders clean student thank-you page (no header, centered button) - add CSS for .thanks-student-page, .btn-new-form, .thanks-success, .thanks-error - admin auth always required; student mode is purely UI variant on the physical machine
57 lines
1.5 KiB
PHP
57 lines
1.5 KiB
PHP
<?php
|
|
// Bootstrap application
|
|
require_once __DIR__ . '/../../../config/bootstrap.php';
|
|
require_once __DIR__ . '/../../../src/AdminAuth.php';
|
|
|
|
ini_set('display_errors', 0);
|
|
ini_set('log_errors', 1);
|
|
ini_set('error_log', 'error.log');
|
|
|
|
AdminAuth::requireLogin();
|
|
|
|
$studentMode = isset($_POST['student_mode']) && $_POST['student_mode'] === '1';
|
|
|
|
// Verify CSRF token
|
|
if (!isset($_POST['csrf_token'], $_SESSION['csrf_token'])
|
|
|| !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
|
|
error_log('CSRF token validation failed in formulaire.php');
|
|
die('Erreur de sécurité : token invalide. Veuillez recharger le formulaire.');
|
|
}
|
|
|
|
error_log('FILES array: ' . print_r($_FILES, true));
|
|
|
|
require_once APP_ROOT . '/src/ThesisCreateController.php';
|
|
|
|
try {
|
|
$ctrl = ThesisCreateController::make();
|
|
$thesisId = $ctrl->submit($_POST, $_FILES);
|
|
|
|
unset($_SESSION['csrf_token']);
|
|
|
|
$redirect = '../thanks.php?id=' . urlencode($thesisId);
|
|
if ($studentMode) {
|
|
$redirect .= '&mode=student';
|
|
}
|
|
header('Location: ' . $redirect);
|
|
exit();
|
|
|
|
} catch (Exception $e) {
|
|
error_log('ThesisCreateController error: ' . $e->getMessage());
|
|
|
|
App::flash('error', $e->getMessage());
|
|
$_SESSION['form_data'] = $_POST;
|
|
|
|
$redirect = '../add.php';
|
|
if ($studentMode) {
|
|
$redirect .= '?mode=student';
|
|
}
|
|
|
|
$autofocusField = ThesisCreateController::autofocusFieldForError($e->getMessage());
|
|
if ($autofocusField !== null) {
|
|
App::flashAutofocus($autofocusField);
|
|
}
|
|
|
|
header('Location: ' . $redirect);
|
|
exit();
|
|
}
|