Version 4.5.0

applications/cms/modules/admin/pages/blocks.php

@@ -12,7 +12,7 @@
 namespace IPS\cms\modules\admin\pages;
 
 /* To prevent PHP errors (extending class does not exist) revealing path */
-if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
+if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
 {
 	header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
 	exit;
@@ -23,6 +23,11 @@ if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
  */
 class _blocks extends \IPS\Node\Controller
 {
+	/**
+	 * @brief	Has been CSRF-protected
+	 */
+	public static $csrfProtected = TRUE;
+
 	/**
 	 * Node Class
 	 */
@@ -82,6 +87,7 @@ class _blocks extends \IPS\Node\Controller
 	{
 		if ( isset( \IPS\Request::i()->id ) )
 		{
+			\IPS\Session::i()->csrfCheck();
 			\IPS\cms\Blocks\Block::deleteCompiled( \IPS\Request::i()->id );
 		}
 		
@@ -100,6 +106,17 @@ class _blocks extends \IPS\Node\Controller
 		
 		return $buttons;
 	}
+
+	/**
+	 * Fetch any additional HTML for this row
+	 *
+	 * @param	object	$node	Node returned from $nodeClass::load()
+	 * @return	NULL|string
+	 */
+	public function _getRowHtml( $node )
+	{
+		return \IPS\Theme::i()->getTemplate( 'blocks', 'cms', 'admin' )->rowHtml( $node );
+	}
 	
 	/**
 	 * Add block, pre form
@@ -211,4 +228,33 @@ class _blocks extends \IPS\Node\Controller
         \IPS\Output::i()->title	 = \IPS\Member::loggedIn()->language()->addToStack('block_embed_title');
         \IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'global', 'core', 'admin' )->block( '', \IPS\Theme::i()->getTemplate( 'blocks', 'cms', 'admin' )->embedCode( $block, $embedKey ) );;
     }
+    
+    /**
+	 * Load tags
+	 *
+	 * @return	void
+	 */
+	public function loadTags(): void
+	{
+		$tags = array();
+		$tagLinks = array();
+		
+		/* If we can manage words, then the header needs to always show */
+		if (  \IPS\Member::loggedIn()->hasAcpRestriction( 'core', 'languages', 'lang_words' ) )
+		{
+			$tags['cms_tag_lang'] = array();
+			$tagLinks['cms_tag_lang']	= array(
+				'icon'		=> 'plus',
+				'title'		=> \IPS\Member::loggedIn()->language()->addToStack('add_word'),
+				'link'		=> \IPS\Http\Url::internal( "app=core&module=languages&controller=languages&do=addWord" ),
+				'data'		=> array( 'ipsDialog' => '', 'ipsDialog-title' => \IPS\Member::loggedIn()->language()->addToStack( 'add_word' ), 'ipsDialog-remoteSubmit' => TRUE )
+			);
+		}
+		foreach( \IPS\Db::i()->select( '*', 'core_sys_lang_words', array( "word_is_custom=? AND lang_id=?", 1, \IPS\Member::loggedIn()->language()->_id ) ) AS $lang )
+		{
+			$tags['cms_tag_lang']['{lang="' . $lang['word_key'] . '"}'] = $lang['word_custom'] ?: $lang['word_default'];
+		}
+		
+		\IPS\Output::i()->sendOutput( \IPS\Theme::i()->getTemplate( 'global', 'core' )->blankTemplate( \IPS\Theme::i()->getTemplate( 'forms', 'core', 'global' )->editorTags( $tags, $tagLinks ) ), 200, 'text/html' );
+	}
 }