Backend, frontend and 404 handlers partially implemented.

* Backend layout done.
* Frontend theoretically done (untested).
* 404 handler done
* Added textprocessors.php

1 files changed, 47 insertions, 14 deletions

diff --git a/ratatoeskr/backend/main.php b/ratatoeskr/backend/main.php
index cd7bb35..9767cb4 100644
--- a/ratatoeskr/backend/main.php
+++ b/ratatoeskr/backend/main.php
@@ -12,18 +12,23 @@
 require_once(dirname(__FILE__) . "/../sys/models.php");
 require_once(dirname(__FILE__) . "/../sys/pwhash.php");
 
+$admin_grp = Group::by_name("admins");
+
 $backend_subactions = url_action_subactions(array(
-	"_default" => url_action_alias(array("login")),
+	"_index" => url_action_alias(array("login")),
+	"index" => url_action_alias(array("login")),
+	/* _prelude guarantees that the user is logged in properly, so we do not have to care about that later. */
 	"_prelude" => function(&$data, $url_now, &$url_next)
 	{
-		global $ratatoeskr_settings;
+		global $ratatoeskr_settings, $admin_grp, $ste;
+		
 		/* Check authentification */
-		if(isset($_SESSION["uid"]))
+		if(isset($_SESSION["ratatoeskr_uid"]))
 		{
 			try
 			{
-				$user = User::by_id($_SESSION["uid"]);
-				if($user->pwhash == $_SESSION["pwhash"])
+				$user = User::by_id($_SESSION["ratatoeskr_uid"]);
+				if(($user->pwhash == $_SESSION["ratatoeskr_pwhash"]) and $user->member_of($admin_grp))
 				{
 					if(empty($user->language))
 					{
@@ -34,10 +39,12 @@ $backend_subactions = url_action_subactions(array(
 					
 					if($url_next[0] == "login")
 						$url_next = array("content", "write");
+					$data["user"] = $user;
+					$ste->vars["user"] = array("name" => $user->username);
 					return; /* Authentification successful, continue  */
 				}
 				else
-					unset($_SESSION["uid"]);
+					unset($_SESSION["ratatoeskr_uid"]);
 			}
 			catch(DoesNotExistError $e)
 			{
@@ -48,10 +55,9 @@ $backend_subactions = url_action_subactions(array(
 		/* If we are here, user is not logged in... */
 		$url_next = array("login");
 	},
-	"index" => url_action_alias(array("login")),
 	"login" => url_action_simple(function($data)
 	{
-		global $ste;
+		global $ste, $admin_grp;
 		if(!empty($_POST["user"]))
 		{
 			try
@@ -59,24 +65,51 @@ $backend_subactions = url_action_subactions(array(
 				$user = User::by_name($_POST["user"]);
 				if(!PasswordHash::validate($_POST["password"], $user->pwhash))
 					throw new Exception();
-				$_SESSION["uid"]    = $user->get_id();
-				$_SESSION["pwhash"] = $user->pwhash;
+				if(!$user->member_of($admin_grp))
+					throw new Exception();
+				$_SESSION["ratatoeskr_uid"]    = $user->get_id();
+				$_SESSION["ratatoeskr_pwhash"] = $user->pwhash;
 			}
 			catch(Exception $e)
 			{
 				$ste->vars["login_failed"] = True;
 			}
 			
-			/* Login successful. Now redirect... */
+			/* Login successful. */
+			$data["user"] = $user;
+			$ste->vars["user"] = array("name" => $user->username);
 			throw new Redirect(array("content", "write"));
 		}
 		
 		echo $ste->exectemplate("systemtemplates/backend_login.html");
 	}),
-	"content" => url_action_simple(function($data)
+	"logout" => url_action_simple(function($data)
 	{
-		print "hi";
-	})
+		echo "foo";
+		unset($_SESSION["ratatoeskr_uid"]);
+		unset($_SESSION["ratatoeskr_pwhash"]);
+		throw new Redirect(array("login"));
+	}),
+	"content" => url_action_subactions(array(
+		"write" => function(&$data, $url_now, &$url_next)
+		{
+			global $ste, $translation;
+			
+			$article = array_slice($url_next, 0);
+			$url_next = array();
+			
+			$ste->vars["section"] = "content";
+			$ste->vars["submenu"] = "newarticle";
+			
+			if(empty($article))
+			{
+				/* New Article */
+				$ste->vars["pagetitle"] = $translation["new_article"];
+			}
+			
+			echo $ste->exectemplate("systemtemplates/content_write.html");
+		}
+	))
 ));
 
 ?>