Update index-controller.php

Update index.php
2026-07-18 16:19:48 +02:00 · 2026-07-18 16:14:09 +02:00 · 2026-07-18 16:11:53 +02:00 · 2026-07-18 16:08:05 +02:00 · 2026-07-18 16:06:35 +02:00 · 2026-07-18 15:53:33 +02:00
2 changed files with 73 additions and 91 deletions
@@ -2,52 +2,10 @@
 if (session_status() === PHP_SESSION_NONE) {
    session_start();
 }
-ob_start();
-include_once("php/controller/index.php");
-
-$pfad = $_GET["pfad"] ?? "home";
-
-/*
-    Controller für Aktionen werden vor der HTML-Ausgabe geladen,
-    damit Weiterleitungen mit header() funktionieren.
-*/
-if ($pfad === "login") {
-    include_once "php/controller/login-controller.php";
-}
-
-if ($pfad === "register") {
-    include_once "php/controller/register-controller.php";
-}
-if ($pfad === "password-forgotten") {
-include_once "php/controller/password-forgotten-controller.php";
-}
-
-if ($pfad === "confirm-register") {
-    include_once "php/controller/confirm-register-controller.php";
-}
-
-if ($pfad === "confirm-password") {
-    include_once "php/controller/confirm-password-controller.php";
-}
-
-if ($pfad === "logout") {
-    include_once "php/controller/logout-controller.php";
-    exit();
-}
-
-if ($pfad === "deleteAccount") {
-    include_once "php/controller/deleteAccount-controller.php";
-    exit();
-}
+include_once "php/controller/index-controller.php";
 ?>
-
-    <!--
-        Seite: Index der Lernplattform
-        Funktion: Webseitengerüst, Anzeigen von Content
-    -->
 <!DOCTYPE html>
 <html lang="de">
-
 <head>
    <meta charset="utf-8">
    <meta name="description" content="EduForge">
@@ -73,17 +31,13 @@ if ($pfad === "deleteAccount") {

    <title>EduForge</title>
 </head>
-
 <body>

 <?php
 include_once 'includes/navbar.php';

-    /*
-        Dynamischer Inhalt:
-        Je nach pfad-Parameter wird die passende Datei aus content geladen.
-    */
-    if (file_exists('content/' . $pfad . '.php')) {
+// Dynamischer Inhalt
+if (isset($pfad) && $pfad !== "404" && file_exists('content/' . $pfad . '.php')) {
    include_once 'content/' . $pfad . '.php';
 } else {
    include_once 'content/404.php';
@@ -94,7 +48,3 @@ if ($pfad === "deleteAccount") {

 </body>
 </html>
-
-<?php
-ob_end_flush();
-?>
@@ -1,3 +1,35 @@
 <?php
+// Standardpfad
+$pfad = $_GET["pfad"] ?? "home";

-?>
+if ($pfad === "logout") {
+    include_once "php/controller/logout-controller.php";
+    exit();
+} elseif ($pfad === "deleteAccount") {
+    include_once "php/controller/deleteAccount-controller.php";
+    exit();
+}
+
+if ($pfad === "login") {
+    include_once "php/controller/login-controller.php";
+} elseif ($pfad === "register") {
+    include_once "php/controller/register-controller.php";
+} elseif ($pfad === "password-forgotten") {
+    include_once "php/controller/password-forgotten-controller.php";
+} elseif ($pfad === "confirm-register") {
+    include_once "php/controller/confirm-register-controller.php";
+} elseif ($pfad === "confirm-password") {
+    include_once "php/controller/confirm-password-controller.php";
+}
+
+// Whitelist
+$erlaubte_content_seiten = [
+    "accessibility", "confirm-password", "confirm-register", "createArticle",
+    "datenschutz", "home", "impressum", "login", "nutzungsbedingungen",
+    "password-forgotten", "profile", "register", "search-results",
+    "show-mail", "showArticle", "showCategory", "updateArticle"
+];
+
+if (!in_array($pfad, $erlaubte_content_seiten)) {
+    $pfad = "404";
+}
Author	SHA1	Message	Date
niklas.ortmann	35d4425086	Update index-controller.php	2026-07-18 16:19:48 +02:00
niklas.ortmann	d3435d4cde	Update index.php	2026-07-18 16:14:09 +02:00
niklas.ortmann	f61c548b9e	Update index.php	2026-07-18 16:11:53 +02:00
niklas.ortmann	101a2a247b	Update index-controller.php	2026-07-18 16:08:05 +02:00
niklas.ortmann	423941e7ed	Update index-controller.php	2026-07-18 16:06:35 +02:00
niklas.ortmann	a8e76c782d	Update index-controller.php	2026-07-18 15:53:33 +02:00
niklas.ortmann	3f9c048493	Update index.php	2026-07-18 15:53:31 +02:00
niklas.ortmann	fee5a701df	Update index-controller.php	2026-07-18 15:50:07 +02:00
niklas.ortmann	d341312192	Update index-controller.php	2026-07-18 15:47:25 +02:00
niklas.ortmann	4dadfb8863	Update index.php	2026-07-18 15:47:23 +02:00
niklas.ortmann	0b4c5f988d	Merge pull request 'Anzeigenamen' (#51 ) from AnzeigeNamen into dev Reviewed-on: #51	2026-07-17 18:09:29 +02:00