rework class system to use subdirectories

[tt-rss.git] / backend.php

diff --git a/backend.php b/backend.php
index 3b1208f316997965ba901716ca519eabec7c50e3..b0ef5e0f1f2db261b54faa052a52874850c3dd95 100644 (file)
--- a/backend.php
+++ b/backend.php
@@ -35,11 +35,10 @@
                return;
        }
 
-       $csrf_token = $_REQUEST['csrf_token'];
+       @$csrf_token = $_REQUEST['csrf_token'];
 
        require_once "functions.php";
        require_once "sessions.php";
-       require_once "sanity_check.php";
        require_once "config.php";
        require_once "db.php";
        require_once "db-prefs.php";
@@ -56,7 +55,7 @@
 
        header("Content-Type: text/plain; charset=utf-8");
 
-       if (ENABLE_GZIP_OUTPUT) {
+       if (ENABLE_GZIP_OUTPUT && function_exists("ob_gzhandler")) {
                ob_start("ob_gzhandler");
        }
 
@@ -78,6 +77,8 @@
                return;
        }
 
+       $plugins = new Plugins($link);
+
        $purge_intervals = array(
                0  => __("Use default"),
                -1 => __("Never purge"),
@@ -125,26 +126,19 @@
                5 => __("Power User"),
                10 => __("Administrator"));
 
-       $error = sanity_check($link);
-
-       if ($error['code'] != 0 && $op != "logout") {
-               print json_encode(array("error" => $error));
-               return;
-       }
+       #$error = sanity_check($link);
 
-       function __autoload($class) {
-               $file = "classes/".strtolower(basename($class)).".php";
-               if (file_exists($file)) {
-                       require $file;
-               }
-       }
+       #if ($error['code'] != 0 && $op != "logout") {
+       #       print json_encode(array("error" => $error));
+       #       return;
+       #}
 
        $op = str_replace("-", "_", $op);
 
        if (class_exists($op)) {
                $handler = new $op($link, $_REQUEST);
 
-               if ($handler) {
+               if ($handler && is_subclass_of($handler, 'Handler')) {
                        if (validate_csrf($csrf_token) || $handler->csrf_ignore($method)) {
                                if ($handler->before($method)) {
                                        if ($method && method_exists($handler, $method)) {