Example #1
0
        echo '</div>';
        if (isset($_GET['id']) && admin_query::plugin_exists($_GET['id'])) {
            $info = admin_query::plugin_infos($_GET['id']);
            $directory = dirname($info->main_file);
            if (empty($_GET['page'])) {
                $page = DIRECTORY_SEPARATOR . basename($info->main_file);
            } else {
                if (file_exists(DIR . '/' . UPDIR . '/' . $directory . '/' . str_replace(array('../', './', '..\\', '.\\'), '', $_GET['page']))) {
                    $page = $_GET['page'];
                } else {
                    $page = DIRECTORY_SEPARATOR . basename($info->main_file);
                }
            }
            if ($_SERVER['REQUEST_METHOD'] == 'POST' && check_csrf($_POST['csrf'], 'plugins_csrf')) {
                if (isset($_POST['text'])) {
                    if (actions::edit_plugin_page($directory, array('page' => $page, 'text' => $_POST['text']))) {
                        echo '<div class="a-success">' . $LANG['msg_saved'] . '</div>';
                    } else {
                        echo '<div class="a-error">' . $LANG['msg_error'] . '</div>';
                    }
                }
            }
            $csrf = $_SESSION['plugins_csrf'] = \site\utils::str_random(10);
            echo '<div class="page-toolbar">

' . sprintf($LANG['plugin_editor_title'], $info->name) . '

<form action="#" method="GET" autocomplete="off" style="float: right;">
<input type="hidden" name="route" value="plugins.php" />
<input type="hidden" name="action" value="editor" />
<input type="hidden" name="id" value="' . htmlspecialchars($_GET['id']) . '" />