<?php
/***************************************************************************
- * Copyright (C) 2003-2007 Polytechnique.org *
+ * Copyright (C) 2003-2008 Polytechnique.org *
* http://opensource.polytechnique.org/ *
* *
* This program is free software; you can redistribute it and/or modify *
}
exit;
}
-
+
function handler_index(&$page)
{
$page->nomenu = true;
function handler_admin(&$page)
{
- new_admin_page('xnet/admin.tpl');
+ $page->changeTpl('xnet/admin.tpl');
if (Get::has('del')) {
$res = XDB::query('SELECT id, nom, mail_domain
list($id, $nom, $domain) = $res->fetchOneRow();
$page->assign('nom', $nom);
if ($id && Post::has('del')) {
+ S::assert_xsrf_token();
+
XDB::query('DELETE FROM groupex.membres WHERE asso_id={?}', $id);
$page->trig('membres supprimés');
}
if (Post::has('diminutif')) {
+ S::assert_xsrf_token();
+
XDB::query('INSERT INTO groupex.asso (id,diminutif)
VALUES(NULL,{?})', Post::v('diminutif'));
pl_redirect('../'.Post::v('diminutif').'/edit');
$page->setType($cat);
}
-
+
function handler_autologin(&$page)
{
$allkeys = func_get_args();