cx/cx.php

   1 <?php
   2
   3 function cx_require(...$segments) {
   4         array_unshift($segments, CX_PATH);
   5         require_once(join(DIRECTORY_SEPARATOR, $segments));
   6 }
   7
   8 define('CX_PATH', __DIR__);
   9
  10 cx_require('lib', 'admin.php');
  11 cx_require('lib', 'form.php');
  12 cx_require('lib', 'http.php');
  13 cx_require('lib', 'images.php');
  14 cx_require('lib', 'posts.php');
  15 cx_require('lib', 'sessions.php');
  16 cx_require('lib', 'setup.php');
  17 cx_require('lib', 'site.php');
  18 cx_require('lib', 'system.php');
  19 cx_require('lib', 'template.php');
  20 cx_require('lib', 'url.php');
  21 cx_require('lib', 'user_data.php');
  22 cx_require('lib', 'users.php');
  23
  24 function cx($db_path, $data_folder_path, $public_data_folder_path) {
  25         define('CX_DATABASE_FILE', $db_path);
  26         define('CX_USER_DATA_PATH', $data_folder_path);
  27         define('CX_PUBLIC_USER_DATA_PATH', $public_data_folder_path);
  28
  29         if (cx_setup_required()) {
  30                 cx_setup_run();
  31
  32                 require('../setup.php');
  33                 $new_author = cx_users_add_user(CX_SETUP_USER, CX_SETUP_PASSWORD);
  34                 $new_site = cx_sites_add_site(CX_SETUP_URL, CX_SETUP_TITLE, CX_SETUP_BYLINE, CX_SETUP_COPYRIGHT);
  35                 cx_sites_site_add_user($new_site, $new_author, true);
  36
  37                 exit;
  38         }
  39
  40         $path = '/';
  41
  42         if (isset($_SERVER['REQUEST_URI'])) {
  43                 $route_details = parse_url($_SERVER['REQUEST_URI']);
  44                 if (isset($route_details['path'])) {
  45                         $path = $route_details['path'];
  46                 }
  47         }
  48
  49         $script_name = $_SERVER['SCRIPT_NAME'];
  50         $script_name_len = strlen($script_name);
  51         if (substr_compare($path, $script_name, 0, $script_name_len) == 0) {
  52                 $path = substr($path, $script_name_len);
  53         }
  54
  55         cx_route($path);
  56 }
  57
  58 function cx_route($path) {
  59         $path_components = explode('/', $path, 10);
  60         $path_components = array_filter($path_components);
  61         $path_components = array_values($path_components); // re-index
  62
  63         $template = null;
  64         $template_class = 'public';
  65         $template_variables = [];
  66
  67         if (count($path_components) == 0) {
  68                 $template = 'list';
  69                 $template_variables['page_number'] = 0;
  70         } else if (cx_template_has_content('public', $path)) {
  71                 cx_template_output_content('public', $path);
  72                 exit(0);
  73         } else if (cx_template_has_content('admin', $path)) {
  74                 cx_template_output_content('admin', $path);
  75                 exit(0);
  76         } else if (count($path_components) >= 1 && $path_components[0] == 'feed') {
  77                 header('Content-type: application/atom+xml;');
  78                 $template = 'atom';
  79         } else if (count($path_components) >= 1 && $path_components[0] == 'cx') {
  80                 if (count($path_components) >= 2 && $path_components[1] == 'login') {
  81                         if (cx_admin_logged_in()) {
  82                                 cx_http_redirect(cx_url_admin('/'));
  83                                 exit(0);
  84                         } else {
  85                                 $username = cx_form_input_sanitized('id');
  86                                 $password = cx_form_input_sanitized('password');
  87
  88                                 if ($username != null && $password != null && cx_admin_login($username, $password)) {
  89                                         cx_http_redirect(cx_url_admin('/'));
  90                                         exit(0);
  91                                 }
  92
  93                                 $template_class = 'admin';
  94                                 $template = 'login';
  95                         }
  96                 } else {
  97                         if (cx_admin_logged_in() == false) {
  98                                 cx_http_redirect(cx_url_admin('/login/'));
  99                                 exit(0);
 100                         } else {
 101                                 if (count($path_components) >= 2 && $path_components[1] == 'logout') {
 102                                         cx_admin_logout();
 103                                         cx_http_redirect(cx_url_admin('/'));
 104                                         exit(0);
 105                                 } else if (count($path_components) >= 3 && $path_components[1] == 'posts' && $path_components[2] == 'add') {
 106                                         $template_variables['post_id'] = '0';
 107                                         $template_variables['post_title'] = '';
 108                                         $template_variables['post_slug'] = '';
 109                                         $template_variables['post_date'] = '';
 110                                         $template_variables['post_data'] = '';
 111                                         $template_variables['post_is_page'] = false;
 112                                         $template_variables['post_is_draft'] = true;
 113
 114                                         $template_class = 'admin';
 115                                         $template = 'post';
 116                                 } else if (count($path_components) >= 3 && $path_components[1] == 'posts' && $path_components[2] == 'edit') {
 117                                         $post = cx_posts_find_post($_GET['id']);
 118
 119                                         $template_variables['post_id'] = $post->id;
 120                                         $template_variables['post_title'] = $post->title;
 121                                         $template_variables['post_slug'] = $post->slug;
 122                                         $template_variables['post_date'] = $post->date;
 123                                         $template_variables['post_data'] = $post->data;
 124                                         $template_variables['post_is_page'] = $post->is_page;
 125                                         $template_variables['post_is_draft'] = $post->is_draft;
 126
 127                                         $template_class = 'admin';
 128                                         $template = 'post';
 129                                 } else if (count($path_components) >= 3 && $path_components[1] == 'posts' && $path_components[2] == 'update') {
 130                                         $title = cx_form_input_sanitized('post_title');
 131                                         $slug = cx_form_input_sanitized('post_slug');
 132                                         if (isset($slug) == false) $slug = null;
 133                                         $date = cx_form_input_sanitized_date_time('post_date');
 134                                         if (isset($date) == false) $date = null;
 135                                         $is_page = cx_form_input_sanitized('post_is_page') == 'page';
 136                                         $is_draft = cx_form_input_sanitized('post_is_draft') == 'draft';
 137                                         $data = cx_form_input_sanitized_allowing_html('post_data');
 138
 139                                         if (isset($_GET['id']) == false or $_GET['id'] == 0) {
 140                                                 cx_posts_add_post(1, $title, $slug, $date, $is_page, $is_draft, $data);
 141                                         } else {
 142                                                 $id = $_GET['id'];
 143                                                 cx_posts_update_post($id, $title, $slug, $date, $is_page, $is_draft, $data);
 144                                         }
 145
 146                                         cx_http_redirect(cx_url_admin('/'));
 147                                         exit(0);
 148                                 } else if (count($path_components) >= 3 && $path_components[1] == 'posts' && $path_components[2] == 'delete') {
 149                                         cx_posts_delete_post($_GET['id']);
 150                                         cx_http_redirect(cx_url_admin('/'));
 151                                         exit(0);
 152                                 } else if (count($path_components) >= 3 && $path_components[1] == 'images' && $path_components[2] == 'add') {
 153                                         $template_variables['image_id'] = '0';
 154                                         $template_variables['image_alt_text'] = '';
 155
 156                                         $template_class = 'admin';
 157                                         $template = 'image';
 158                                 } else if (count($path_components) >= 3 && $path_components[1] == 'images' && $path_components[2] == 'update') {
 159                                         $alt_text = cx_form_input_sanitized('image_alt_text');
 160
 161                                         $filename = $_FILES['image_file']['tmp_name'];
 162                                         $original_filename = $_FILES['image_file']['name'];
 163
 164                                         cx_images_add_image(1, $alt_text, $filename, $original_filename);
 165
 166                                         cx_http_redirect(cx_url_admin('/'));
 167                                         exit(0);
 168                                 } else {
 169                                         $template_class = 'admin';
 170                                         $template = 'main';
 171                                 }
 172                         }
 173                 }
 174         } else if (count($path_components) >= 2 && $path_components[0] == 'page') { // FIXME sometime, needs more flexibility...
 175                 $page_number = $path_components[1];
 176
 177                 $template = 'list';
 178                 $template_variables['page_number'] = $page_number;
 179         } else {
 180                 if (count($path_components) >= 1) {
 181                         $slug = $path_components[0];
 182                         $page_id = cx_posts_find_page_id($slug);
 183                         if ($page_id) {
 184                                 $template = 'post';
 185                                 $template_variables['post_id'] = $page_id;
 186                         }
 187                 }
 188
 189                 if ($template == null && count($path_components) >= 3) { // FIXME sometime, needs more flexibility...
 190                         $year = $path_components[0];
 191                         $month = $path_components[1];
 192                         $slug = $path_components[2];
 193                         $post_id = cx_posts_find_article_id($slug);
 194                         if ($post_id) {
 195                                 $template = 'post';
 196                                 $template_variables['post_id'] = $post_id;
 197                         }
 198                 }
 199         }
 200
 201         if ($template != null) {
 202                 $output = cx_template_render($template_class, $template, $template_variables);
 203                 echo($output);
 204         } else {
 205                 http_response_code(404);
 206                 exit(0);
 207         }
 208 }