ZwiiCMS-Team/ZwiiCMS
ZwiiCMS-Team
/
ZwiiCMS
3
3
Fork 2
Code Releases 145 Activity

Csrf Theme reset

This commit is contained in:
Fred Tempez 2023-06-20 20:15:55 +02:00
parent adf0ac8f80
commit f262b661e9
1 changed files with 25 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

62
core/module/theme/theme.php
View File

@ -811,44 +811,32 @@ class theme extends common
*/ */
public function reset() public function reset()
{ {
// $url prend l'adresse sans le token // Réinitialisation
$url = explode('&', $this->getUrl(2)); $redirect = '';
switch ($this->getUrl(2)) {
if ( case 'admin':
isset($_GET['csrf']) $this->initData('admin', self::$i18nUI);
and $_GET['csrf'] === $_SESSION['csrf'] $redirect = helper::baseUrl() . 'theme/admin';
) { break;
// Réinitialisation case 'manage':
$redirect = ''; $this->initData('theme', self::$i18nUI);
switch ($url[0]) { $redirect = helper::baseUrl() . 'theme/manage';
case 'admin': break;
$this->initData('admin', self::$i18nUI); case 'custom':
$redirect = helper::baseUrl() . 'theme/admin'; unlink(self::DATA_DIR . 'custom.css');
break; $redirect = helper::baseUrl() . 'theme/advanced';
case 'manage': break;
$this->initData('theme', self::$i18nUI); default:
$redirect = helper::baseUrl() . 'theme/manage'; $redirect = helper::baseUrl() . 'theme';
break;
case 'custom':
unlink(self::DATA_DIR . 'custom.css');
$redirect = helper::baseUrl() . 'theme/advanced';
break;
default:
$redirect = helper::baseUrl() . 'theme';
}
// Valeurs en sortie
$this->addOutput([
'notification' => helper::translate('Thème réinitialisé'),
'redirect' => $redirect,
'state' => true
]);
} else {
// Valeurs en sortie
$this->addOutput([
'notification' => helper::translate('Jeton incorrect')
]);
} }
// Valeurs en sortie
$this->addOutput([
'notification' => helper::translate('Thème réinitialisé'),
'redirect' => $redirect,
'state' => true
]);
} }