mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-05-06 19:19:19 +02:00
71 lines
2.5 KiB
PHP
71 lines
2.5 KiB
PHP
<?php
|
|
/**
|
|
* Student-access link actions (create, toggle, set_password, delete).
|
|
*/
|
|
require_once __DIR__ . '/../../../bootstrap.php';
|
|
require_once __DIR__ . '/../../../src/AdminAuth.php';
|
|
require_once __DIR__ . '/../../../src/ShareLink.php';
|
|
|
|
App::adminGuard();
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] !== 'POST'
|
|
|| !isset($_POST['csrf_token'], $_SESSION['csrf_token'])
|
|
|| !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
|
|
http_response_code(403);
|
|
exit('CSRF token invalide.');
|
|
}
|
|
|
|
$action = $_POST['action'] ?? '';
|
|
$id = isset($_POST['id']) ? intval($_POST['id']) : 0;
|
|
$shareLink = ShareLink::make();
|
|
|
|
switch ($action) {
|
|
case 'create':
|
|
$password = !empty($_POST['password']) ? trim($_POST['password']) : null;
|
|
$expiresRaw = !empty($_POST['expires_at']) ? trim($_POST['expires_at']) : null;
|
|
$expiresAt = null;
|
|
if ($expiresRaw) {
|
|
$expiresAt = date('Y-m-d H:i:s', strtotime($expiresRaw));
|
|
if ($expiresAt <= date('Y-m-d H:i:s')) {
|
|
App::redirect('/admin/acces.php', error: "La date d'expiration doit être dans le futur.");
|
|
}
|
|
}
|
|
$objetRaw = $_POST['objet_restriction'] ?? '';
|
|
$objetRestriction = in_array($objetRaw, ['tfe', 'thèse', 'frart'], true) ? $objetRaw : null;
|
|
$shareLink->create(1, $password, $expiresAt, $objetRestriction);
|
|
App::redirect('/admin/acces.php', success: 'Lien d\'accès créé.');
|
|
break;
|
|
|
|
case 'toggle':
|
|
if ($id > 0) {
|
|
$shareLink->toggleActive($id);
|
|
App::redirect('/admin/acces.php', success: 'Statut du lien modifié.');
|
|
} else {
|
|
App::redirect('/admin/acces.php', error: 'Lien introuvable.');
|
|
}
|
|
break;
|
|
|
|
case 'set_password':
|
|
if ($id > 0) {
|
|
$password = isset($_POST['password']) && $_POST['password'] !== '' ? trim($_POST['password']) : null;
|
|
$shareLink->setPassword($id, $password);
|
|
App::redirect('/admin/acces.php', success: 'Mot de passe mis à jour.');
|
|
} else {
|
|
App::redirect('/admin/acces.php', error: 'Lien introuvable.');
|
|
}
|
|
break;
|
|
|
|
case 'delete':
|
|
if ($id > 0) {
|
|
$shareLink->delete($id);
|
|
App::redirect('/admin/acces.php', success: 'Lien supprimé.');
|
|
} else {
|
|
App::redirect('/admin/acces.php', error: 'Lien introuvable.');
|
|
}
|
|
break;
|
|
|
|
default:
|
|
App::redirect('/admin/acces.php', error: 'Action inconnue.');
|
|
break;
|
|
}
|