Commit 398b54a4 authored by Julien Ait azzouzene's avatar Julien Ait azzouzene
Browse files

🐛 fix: refus d'accès aux non-administrateurs à la modification d'édito

parent 9bc7c7c2

src/controllers/pageModifierEdito.php

+7 −0
Changes for src/controllers/pageModifierEdito.php: 7 added lines, 0 removed lines.
Original line number Diff line number Diff line 
<?php



require_once 'src/controllers/controleur.php';

require_once 'src/controllers/connexion.php';



require_once 'templates/edito.php';



class ModifierEditoControleur extends Controleur {

    public function executer() {

        $utilisateur = ConnexionController::estConnecte();



        if(! $utilisateur || ! $utilisateur->estAdministrateur()){

            throw new Exception('accès refusé');

        }



        afficherPageEdito();

    }

}
 
 No newline at end of file

templates/edito.php

+1 −1
Changes for templates/edito.php: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -11,7 +11,7 @@ if (isset($_POST['redirect'])) { 


    // Écrire le contenu dans le fichier

    file_put_contents($cheminFichier, $contenuEdito);

    header("Location: index.php");

    header("Location: .");

    exit();

}