engelsystem/public/index.php

<?php
require_once realpath(__DIR__ . '/../includes/engelsystem_provider.php');

$free_pages = [
    'admin_event_config',
    'angeltypes',
    'api',
    'atom',
    'credits',
    'ical',
    'login',
    'rooms',
    'shifts',
    'shifts_json_export',
    'shifts_json_export_all',
    'stats',
    'users',
    'user_driver_licenses',
    'user_password_recovery'
];

// Gewünschte Seite/Funktion
$page = "";
if (!isset($_REQUEST['p'])) {
    $_REQUEST['p'] = isset($user) ? "news" : "login";
}

if (
    isset($_REQUEST['p'])
    && preg_match("/^[a-z0-9_]*$/i", $_REQUEST['p'])
    && (
        in_array($_REQUEST['p'], $free_pages)
        || in_array($_REQUEST['p'], $privileges)
    )
) {
    $page = $_REQUEST['p'];

    $title = $page;
    $content = "";

    if ($page == "api") {
        require_once realpath(__DIR__ . '/../includes/controller/api.php');
        error("Api disabled temporily.");
        redirect(page_link_to('login'));
        api_controller();
    } elseif ($page == "ical") {
        require_once realpath(__DIR__ . '/../includes/pages/user_ical.php');
        user_ical();
    } elseif ($page == "atom") {
        require_once realpath(__DIR__ . '/../includes/pages/user_atom.php');
        user_atom();
    } elseif ($page == "shifts_json_export") {
        require_once realpath(__DIR__ . '/../includes/controller/shifts_controller.php');
        shifts_json_export_controller();
    } elseif ($page == "shifts_json_export_all") {
        require_once realpath(__DIR__ . '/../includes/controller/shifts_controller.php');
        shifts_json_export_all_controller();
    } elseif ($page == "stats") {
        require_once realpath(__DIR__ . '/../includes/pages/guest_stats.php');
        guest_stats();
    } elseif ($page == "user_password_recovery") {
        require_once realpath(__DIR__ . '/../includes/controller/users_controller.php');
        $title = user_password_recovery_title();
        $content = user_password_recovery_controller();
    } elseif ($page == "angeltypes") {
        list($title, $content) = angeltypes_controller();
    } elseif ($page == "shifts") {
        list($title, $content) = shifts_controller();
    } elseif ($page == "users") {
        list($title, $content) = users_controller();
    } elseif ($page == "user_angeltypes") {
        list($title, $content) = user_angeltypes_controller();
    } elseif ($page == "user_driver_licenses") {
        list($title, $content) = user_driver_licenses_controller();
    } elseif ($page == "shifttypes") {
        list($title, $content) = shifttypes_controller();
    } elseif ($page == "admin_event_config") {
        list($title, $content) = event_config_edit_controller();
    } elseif ($page == "rooms") {
        list($title, $content) = rooms_controller();
    } elseif ($page == "news") {
        $title = news_title();
        $content = user_news();
    } elseif ($page == "news_comments") {
        require_once realpath(__DIR__ . '/../includes/pages/user_news.php');
        $title = user_news_comments_title();
        $content = user_news_comments();
    } elseif ($page == "user_meetings") {
        $title = meetings_title();
        $content = user_meetings();
    } elseif ($page == "user_myshifts") {
        $title = myshifts_title();
        $content = user_myshifts();
    } elseif ($page == "user_shifts") {
        $title = shifts_title();
        $content = user_shifts();
    } elseif ($page == "user_messages") {
        $title = messages_title();
        $content = user_messages();
    } elseif ($page == "user_questions") {
        $title = questions_title();
        $content = user_questions();
    } elseif ($page == "user_settings") {
        $title = settings_title();
        $content = user_settings();
    } elseif ($page == "login") {
        $title = login_title();
        $content = guest_login();
    } elseif ($page == "register") {
        $title = register_title();
        $content = guest_register();
    } elseif ($page == "logout") {
        $title = logout_title();
        $content = guest_logout();
    } elseif ($page == "admin_questions") {
        $title = admin_questions_title();
        $content = admin_questions();
    } elseif ($page == "admin_user") {
        $title = admin_user_title();
        $content = admin_user();
    } elseif ($page == "admin_arrive") {
        $title = admin_arrive_title();
        $content = admin_arrive();
    } elseif ($page == "admin_active") {
        $title = admin_active_title();
        $content = admin_active();
    } elseif ($page == "admin_free") {
        $title = admin_free_title();
        $content = admin_free();
    } elseif ($page == "admin_news") {
        require_once realpath(__DIR__ . '/../includes/pages/admin_news.php');
        $content = admin_news();
    } elseif ($page == "admin_rooms") {
        $title = admin_rooms_title();
        $content = admin_rooms();
    } elseif ($page == "admin_groups") {
        $title = admin_groups_title();
        $content = admin_groups();
    } elseif ($page == "admin_language") {
        require_once realpath(__DIR__ . '/../includes/pages/admin_language.php');
        $content = admin_language();
    } elseif ($page == "admin_import") {
        $title = admin_import_title();
        $content = admin_import();
    } elseif ($page == "admin_shifts") {
        $title = admin_shifts_title();
        $content = admin_shifts();
    } elseif ($page == "admin_log") {
        $title = admin_log_title();
        $content = admin_log();
    } elseif ($page == "credits") {
        require_once realpath(__DIR__ . '/../includes/pages/guest_credits.php');
        $title = credits_title();
        $content = guest_credits();
    } else {
        require_once realpath(__DIR__ . '/../includes/pages/guest_start.php');
        $content = guest_start();
    }
} else {
    // Wenn schon eingeloggt, keine-Berechtigung-Seite anzeigen
    if (isset($user)) {
        $title = _("No Access");
        $content = _("You don't have permission to view this page. You probably have to sign in or register in order to gain access!");
    } else {
        // Sonst zur Loginseite leiten
        redirect(page_link_to("login"));
    }
}

$event_config = EventConfig();

echo template_render(__DIR__ . '/../templates/layout.html', [
    'theme'          => isset($user) ? $user['color'] : $default_theme,
    'title'          => $title,
    'atom_link'      => ($page == 'news' || $page == 'user_meetings') ? '<link href="' . page_link_to('atom') . (($page == 'user_meetings') ? '&amp;meetings=1' : '') . '&amp;key=' . $user['api_key'] . '" type="application/atom+xml" rel="alternate" title="Atom Feed">' : '',
    'menu'           => make_menu(),
    'content'        => msg() . $content,
    'header_toolbar' => header_toolbar(),
    'faq_url'        => $faq_url,
    'contact_email'  => $contact_email,
    'locale'         => locale(),
    'event_info'     => EventConfig_info($event_config) . '<br />'
]);