2d0938b35b
* Adds config options for disabling, timeout lead time, and forms * Adds another salt in config that's used in the token * Adds protection for login form by default
34 lines
1.0 KiB
PHP
34 lines
1.0 KiB
PHP
<?php
|
|
|
|
// Make sure we are called from index.php
|
|
if (!defined('SECURITY')) die('Hacking attempt');
|
|
|
|
// Include markdown library
|
|
use \Michelf\Markdown;
|
|
|
|
if (!$smarty->isCached('master.tpl', $smarty_cache_key)) {
|
|
$debug->append('No cached version available, fetching from backend', 3);
|
|
// Fetch active news to display
|
|
$aNews = $news->getAllActive();
|
|
if (is_array($aNews)) {
|
|
foreach ($aNews as $key => $aData) {
|
|
// Transform Markdown content to HTML
|
|
$aNews[$key]['content'] = Markdown::defaultTransform($aData['content']);
|
|
}
|
|
}
|
|
|
|
$smarty->assign("HIDEAUTHOR", $setting->getValue('acl_hide_news_author'));
|
|
$smarty->assign("NEWS", $aNews);
|
|
} else {
|
|
$debug->append('Using cached page', 3);
|
|
}
|
|
// csrf token - update if it's enabled
|
|
$token = '';
|
|
if ($config['csrf']['enabled'] && $config['csrf']['forms']['login']) {
|
|
$token = $user->getCSRFToken($_SERVER['REMOTE_ADDR'], 'login');
|
|
}
|
|
// Load news entries for Desktop site and unauthenticated users
|
|
$smarty->assign("CONTENT", "default.tpl");
|
|
$smarty->assign('CTOKEN', $token);
|
|
?>
|