"article", 1 => "page" ]; $repertoire = "/var/www/e59/"; if(isset($_GET['article']) && filter_var($_GET['article'], FILTER_VALIDATE_INT)) { if(file_exists($repertoire . "content/journal/" . $_GET['article'] . ".md")){ $fichier = $repertoire . "content/journal/" . $_GET['article'] . ".md"; $filename = $_GET['article']; $filetype = 0; } } if(isset($_GET['page']) && strpos($_GET['page'], "..") == false) { if(file_exists($repertoire . "content/" . $_GET['page'] . ".md")){ $fichier = $repertoire . "content/" . $_GET['page'] . ".md"; $filename = $_GET['page']; $filetype = 1; } } if(isset($fichier)) { if(isset($_GET['article']) && isset($_POST['deletefile']) && $_POST['deletefile'] == "Supprimer") { if(unlink($fichier)) { $bdd = connect($dbhost, $dbname, $dbuser, $dbpass); $upload = $bdd->prepare("DELETE FROM articles WHERE ID = :filename"); $upload->bindParam(':filename', $filename); if($upload->execute()) { header("Location: editpage.php"); echo "Fichier supprimé"; exit(); } else { die("Erreur SQL"); } } else { die("Erreur : Le fichier n'a pas pu être supprimé"); } } if(isset($_POST['page-content'])) { file_put_contents($fichier, nl2br($_POST['page-content'])); } $contenu = file_get_contents($fichier); } ?> <?=$title?>
" method="post">
"; echo "
"; echo "

" . $filename . "

"; echo '
'; echo '
'; } else { echo "

Pages

"; echo "
"; $pages = scandir($repertoire . "content/"); foreach($pages as $page) { if($page != "." && $page != "..") { if (is_file($repertoire . "content/" . $page)) { echo "
" . pathinfo($page, PATHINFO_FILENAME) . "
"; } } } echo "
"; echo "

Articles

"; $bdd = connect($dbhost, $dbname, $dbuser, $dbpass); $req = $bdd->prepare("SELECT ID, titre, date FROM articles WHERE classification <= :accreditation ORDER BY date DESC LIMIT 10"); $req->bindParam(":accreditation", $_SESSION['accreditation']); $req->execute(); $resultat = $req->fetchAll(PDO::FETCH_ASSOC); if ($resultat) { foreach($resultat as $row) { $date = strtotime($row['date']); echo "

"; echo ""; echo "
" . $row['titre'] . "
"; echo "
"; } } echo "
"; } ?>
'; } ?>