miniflux-legacy/controllers/common.php

86 lines
2.3 KiB
PHP
Raw Normal View History

<?php
use PicoFarad\Router;
use PicoFarad\Response;
use PicoFarad\Request;
use PicoFarad\Session;
2014-03-17 02:56:43 +01:00
use PicoFarad\Template;
// Called before each action
Router\before(function($action) {
Session\open(BASE_URL_DIRECTORY, SESSION_SAVE_PATH, 0);
2014-02-08 20:13:14 +01:00
// Select the requested database either from post param database or from the
// session variable. If it fails, logout to destroy session and
// 'remember me' cookie
2015-01-18 18:40:00 +01:00
if (! is_null(Request\value('database')) && ! Model\Database\select(Request\value('database'))) {
Model\User\logout();
Response\redirect('?action=login');
}
elseif (! empty($_SESSION['database'])) {
if (! Model\Database\select($_SESSION['database'])) {
Model\User\logout();
2014-05-27 02:47:40 +02:00
Response\redirect('?action=login');
}
}
// These actions are considered to be safe even for unauthenticated users
$safe_actions = array('login', 'bookmark-feed', 'select-db', 'logout', 'notfound');
2015-01-18 00:53:40 +01:00
if (! Model\User\is_loggedin() && ! in_array($action, $safe_actions)) {
if (! Model\RememberMe\authenticate()) {
Model\User\logout();
Response\redirect('?action=login');
}
}
elseif (Model\RememberMe\has_cookie()) {
Model\RememberMe\refresh();
}
// Load translations
$language = Model\Config\get('language') ?: 'en_US';
2015-01-18 00:53:40 +01:00
if ($language !== 'en_US') {
Translator\load($language);
}
2014-02-26 01:03:46 +01:00
// Set timezone
date_default_timezone_set(Model\Config\get('timezone') ?: 'UTC');
// HTTP secure headers
Response\csp(array(
'media-src' => '*',
'img-src' => '*',
'frame-src' => Model\Config\get_iframe_whitelist(),
));
Response\xframe();
Response\xss();
Response\nosniff();
});
// Show help
Router\get_action('show-help', function() {
Response\html(Template\load('show_help'));
2014-02-05 03:47:59 +01:00
});
2014-02-08 20:13:14 +01:00
// Show the menu for the mobile view
2014-02-05 03:47:59 +01:00
Router\get_action('more', function() {
Response\html(Template\layout('show_more', array('menu' => 'more')));
});
// Image proxy (avoid SSL mixed content warnings)
Router\get_action('proxy', function() {
list($content, $type) = Model\Proxy\download(rawurldecode(Request\param('url')));
if (empty($content)) {
Response\text('Not Found', 404);
}
Response\content_type($type);
Response\raw($content);
});