diff --git a/index.php b/index.php
index c9a5cfb..f2dda6c 100644
--- a/index.php
+++ b/index.php
@@ -2,99 +2,49 @@
if (session_status() === PHP_SESSION_NONE) {
session_start();
}
-ob_start();
-include_once("php/controller/index.php");
-
-$pfad = $_GET["pfad"] ?? "home";
-
-/*
- Controller für Aktionen werden vor der HTML-Ausgabe geladen,
- damit Weiterleitungen mit header() funktionieren.
-*/
-if ($pfad === "login") {
- include_once "php/controller/login-controller.php";
-}
-
-if ($pfad === "register") {
- include_once "php/controller/register-controller.php";
-}
-if ($pfad === "password-forgotten") {
-include_once "php/controller/password-forgotten-controller.php";
-}
-
-if ($pfad === "confirm-register") {
- include_once "php/controller/confirm-register-controller.php";
-}
-
-if ($pfad === "confirm-password") {
- include_once "php/controller/confirm-password-controller.php";
-}
-
-if ($pfad === "logout") {
- include_once "php/controller/logout-controller.php";
- exit();
-}
-
-if ($pfad === "deleteAccount") {
- include_once "php/controller/deleteAccount-controller.php";
- exit();
-}
+include_once "php/controller/index-controller.php";
?>
+
+
+
+
+
+
+
+
-
-
-
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- EduForge
-
-
-
-
-
-
-
-
+ EduForge
+
+
\ No newline at end of file
+include_once 'includes/navbar.php';
+
+// Dynamischer Inhalt
+if (isset($pfad) && $pfad !== "404" && file_exists('content/' . $pfad . '.php')) {
+ include_once 'content/' . $pfad . '.php';
+} else {
+ include_once 'content/404.php';
+}
+
+include_once 'includes/footer.php';
+?>
+
+
+
diff --git a/php/controller/index-controller.php b/php/controller/index-controller.php
index 62a2de0..7d598f7 100644
--- a/php/controller/index-controller.php
+++ b/php/controller/index-controller.php
@@ -1,3 +1,35 @@
+if ($pfad === "logout") {
+ include_once "php/controller/logout-controller.php";
+ exit();
+} elseif ($pfad === "deleteAccount") {
+ include_once "php/controller/deleteAccount-controller.php";
+ exit();
+}
+
+if ($pfad === "login") {
+ include_once "php/controller/login-controller.php";
+} elseif ($pfad === "register") {
+ include_once "php/controller/register-controller.php";
+} elseif ($pfad === "password-forgotten") {
+ include_once "php/controller/password-forgotten-controller.php";
+} elseif ($pfad === "confirm-register") {
+ include_once "php/controller/confirm-register-controller.php";
+} elseif ($pfad === "confirm-password") {
+ include_once "php/controller/confirm-password-controller.php";
+}
+
+// Whitelist
+$erlaubte_content_seiten = [
+ "accessibility", "confirm-password", "confirm-register", "createArticle",
+ "datenschutz", "home", "impressum", "login", "nutzungsbedingungen",
+ "password-forgotten", "profile", "register", "search-results",
+ "show-mail", "showArticle", "showCategory", "updateArticle"
+];
+
+if (!in_array($pfad, $erlaubte_content_seiten)) {
+ $pfad = "404";
+}