ajout autorisation dans les actions

This commit is contained in:
Christophe 2019-08-20 17:45:22 +02:00
parent 7e597c0ddb
commit 320c3b63e8
3 changed files with 166 additions and 152 deletions

View file

@ -307,3 +307,6 @@ var url_${1:nom} = "[(#VAL{$1}|generer_url_action{"", 1})]";
${0}
endsnippet
snippet ifa "<i class'fa '</i>" w
<i class="fa $1"></i>$0
endsnippet

View file

@ -5,6 +5,12 @@ snippet action "SPIP action declenchee dans un lien"
if (!defined('_ECRIRE_INC_VERSION')) return;
function action_`!v vim_snippets#Filename()`_dist(){
include_spip('inc/autoriser');
if (! autoriser("etre","connecte")) {
return false;
}
$securiser_action = charger_fonction('securiser_action', 'inc');
$arg = $securiser_action();
$$1 = $arg;
@ -29,6 +35,11 @@ if (!defined('_ECRIRE_INC_VERSION')) return;
function action_`!v vim_snippets#Filename()`_dist($arg=null){
include_spip('inc/autoriser');
if (! autoriser("etre","connecte")) {
return false;
}
if (is_null($arg)) {
// DEMI sécurité : s'il y a un hash, on teste la sécurité
if (_request('hash')) {
@ -194,7 +205,7 @@ suivre_invalideur("id='${1:id_objet}/1'");
${0}
endsnippet
snippet req "SPIP _request()"
snippet req "SPIP _request()" w
_request('${1}')${0}
endsnippet

View file

@ -1,12 +1,12 @@
{
"action": {
"prefix": "action",
"body": "<?php\nif (!defined('_ECRIRE_INC_VERSION')) return;\n\nfunction action_${TM_FILENAME_BASE}_dist(){\n\t$securiser_action = charger_fonction('securiser_action', 'inc');\n\t$arg = $securiser_action();\n\t$$1 = $arg;\n\tlist($${1:var1},$${2:var2}) = preg_split(',[^0-9],',$arg);\n\t${0}\n\n\t// Cache\n\tinclude_spip('inc/invalideur');\n\tsuivre_invalideur(\"id='$1/$$1'\");\n\n\t// redirection sur la création d'un rapport\n\t//$retour = \"spip.php?page=\";\n\t//include_spip('inc/headers');\n\t//redirige_par_entete($retour);\n}",
"body": "<?php\nif (!defined('_ECRIRE_INC_VERSION')) return;\n\nfunction action_${TM_FILENAME_BASE}_dist(){\n\t\tinclude_spip('inc/autoriser'); if (! autoriser('etre','connecte')) { return false; }\n\t\t$securiser_action = charger_fonction('securiser_action', 'inc');\n\t$arg = $securiser_action();\n\t$$1 = $arg;\n\tlist($${1:var1},$${2:var2}) = preg_split(',[^0-9],',$arg);\n\t${0}\n\n\t// Cache\n\tinclude_spip('inc/invalideur');\n\tsuivre_invalideur(\"id='$1/$$1'\");\n\n\t// redirection sur la création d'un rapport\n\t//$retour = \"spip.php?page=\";\n\t//include_spip('inc/headers');\n\t//redirige_par_entete($retour);\n}",
"description": "SPIP action declenchee dans un lien"
},
"action2": {
"prefix": "action2",
"body": "<?php\nif (!defined('_ECRIRE_INC_VERSION')) return;\n\nfunction action_${TM_FILENAME_BASE}_dist($arg=null){\n\n\tif (is_null($arg)) {\n\t\t// DEMI sécurité : s'il y a un hash, on teste la sécurité\n\t\tif (_request('hash')) {\n\t\t\t$securiser_action = charger_fonction('securiser_action', 'inc');\n\t\t\t$arg = $securiser_action();\n\t\t}\n\t\t// Sinon, on prend l'arg direct\n\t\telse {\n\t\t\t$arg = _request('arg');\n\t\t}\n\t}\n\t$${1:var} = $arg;\n\t${0}\n\n\t// on renvoit le test en variable js\n\t$js = \"var $1=$$1;\";\n\theader('Content-Type: text/javascript; charset=' . $GLOBALS['meta']['charset']);\n\techo $js;\n}",
"body": "<?php\nif (!defined('_ECRIRE_INC_VERSION')) return;\n\nfunction action_${TM_FILENAME_BASE}_dist($arg=null){\n\n\tinclude_spip('inc/autoriser'); if (! autoriser('etre','connecte')) { return false; }\n\t\tif (is_null($arg)) {\n\t\t// DEMI sécurité : s'il y a un hash, on teste la sécurité\n\t\tif (_request('hash')) {\n\t\t\t$securiser_action = charger_fonction('securiser_action', 'inc');\n\t\t\t$arg = $securiser_action();\n\t\t}\n\t\t// Sinon, on prend l'arg direct\n\t\telse {\n\t\t\t$arg = _request('arg');\n\t\t}\n\t}\n\t$${1:var} = $arg;\n\t${0}\n\n\t// on renvoit le test en variable js\n\t$js = \"var $1=$$1;\";\n\theader('Content-Type: text/javascript; charset=' . $GLOBALS['meta']['charset']);\n\techo $js;\n}",
"description": "SPIP action ajax à la mano"
},
"cvt": {