-
Notifications
You must be signed in to change notification settings - Fork 13
/
Copy pathsite.php
92 lines (77 loc) · 2.63 KB
/
site.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
<?php
require_once 'config.php';
require_once 'db.php';
$db = $CONFIG['db']['type'] == 'mysql' ? new MySqlDatabase()
: new PostgreSqlDatabase();
function html_escape($s) {
return htmlspecialchars($s, ENT_QUOTES, 'UTF-8');
}
function random_hash() {
$s = openssl_random_pseudo_bytes(30);
if ($s === null) {
die('no source of randomness');
}
return md5($s);
}
function require_auth() {
global $CONFIG;
if (!array_key_exists('user', $_SESSION)) {
header(sprintf('Location: %s/login.php', $CONFIG['base_url']));
die;
}
}
function check_csrf() {
if (!array_key_exists('csrf', $_POST) || $_POST['csrf'] !== $_SESSION['csrf']) {
die;
}
}
function csrf_html() {
printf('<input type="hidden", name="csrf" value="%s" />', html_escape($_SESSION['csrf']));
}
function gen_csrf($replace = false) {
if ($replace || !array_key_exists('csrf', $_SESSION)) {
$_SESSION['csrf'] = random_hash();
}
}
function format_size($b) {
if ($b < 1024) return round($b,2) . 'B';
$b /= 1024.0;
if ($b < 1024) return round($b,2) . 'KiB';
$b /= 1024.0;
if ($b < 1024) return round($b,2) . 'MiB';
$b /= 1024.0;
if ($b < 1024) return round($b,2) . 'GiB';
$b /= 1024.0;
return round($b,2) . 'TiB';
}
function site_header() {
global $CONFIG;
printf('<!DOCTYPE html>');
printf('<html>');
printf('<head>');
printf('<meta name="viewport" content="width=device-width, initial-scale=1">');
printf('<meta name="format-detection" content="telephone=no">');
printf('<link rel="shortcut icon" href="img/favicon.ico" type="image/x-icon">');
printf('<link rel="icon" href="/img/favicon.ico" type="image/x-icon">');
printf('<link rel="stylesheet" href="/css/style.css">');
printf('<script src="/js/nav.js"></script>');
printf('<title>%s</title>', html_escape($CONFIG['site_title']));
printf('</head>');
printf('<body>');
if (array_key_exists('user', $_SESSION)) {
printf('<nav><ul class="nav" id="nav">');
printf('<li class="right"><a>Welcome, %s</a></li>', html_escape($_SESSION['user']['username']));
printf('<li><a href="index.php">Index</a></li>');
printf('<li><a href="upload.php">Upload</a></li>');
printf('<li><a href="invitations.php">Invitations</a></li>');
printf('<li><a href="logout.php">Logout</a></li>');
printf('<li class="icon"><a href="javascript:void(0);" onclick="toggleMenu()">+</a></li>');
printf('</ul></nav>');
}
}
function site_footer() {
printf('</body>');
}
// session setup
session_start();
gen_csrf();