get('id'), $_GET['id']); if (!$ecrit) { throw new userException('Cet écrit n\'existe pas.'); } if (isset($_GET['delete'])) { $csrf_key = 'delete_ecrit_'.$ecrit['id']; if (utils::post('delete')) { if (!utils::CSRF_check($csrf_key)) { $msg = 'OTHER'; } else { Ecrit::delete($journal->get('id'), $ecrit['id']); utils::redirect('/ecrire/gestion.php?m='.rawurlencode($ecrit['mois'])); } } $tpl->assign('csrf_key', $csrf_key); $tpl->assign('delete', true); } $ecrit['url'] = utils::getEcritUrl($journal->get('id'), $ecrit); $tpl->assign('title', $ecrit['titre']); $tpl->assign('ecrit', $ecrit); $tpl->assign('msg', $msg); $tpl->assign('next', Ecrit::getNext($journal->get('id'), $ecrit['id'])); $tpl->assign('prev', Ecrit::getPrev($journal->get('id'), $ecrit['id'])); $tpl->display('ecrire/lire.tpl');