X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=view%2Ftheme%2Fvier%2Fstyle.php;h=8cd0d7a32aae8921ab67db53ee12faf928a96bb9;hb=2ae8e5d34e69a180bc29b018e3bc5dd8fbe7336d;hp=d777864825a11cf98b2aeb1d692ab1567b44d7b4;hpb=3aa015d3814c297e36dedeb0e03ff7b4d282844e;p=friendica.git

diff --git a/view/theme/vier/style.php b/view/theme/vier/style.php
index d777864825..8cd0d7a32a 100644
--- a/view/theme/vier/style.php
+++ b/view/theme/vier/style.php
@@ -1,17 +1,33 @@
 <?php
 /**
- * @file view/theme/vier/style.php
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
  */
-use Friendica\Core\Config;
-use Friendica\Core\PConfig;
-use Friendica\Model\Profile;
 
-$uid = Profile::getThemeUid();
+use Friendica\Core\Logger;
+use Friendica\DI;
 
-$style = PConfig::get($uid, 'vier', 'style');
+$uid = $_REQUEST['puid'] ?? 0;
+
+$style = DI::pConfig()->get($uid, 'vier', 'style');
 
 if (empty($style)) {
-	$style = Config::get('vier', 'style');
+	$style = DI::config()->get('vier', 'style');
 }
 
 if (empty($style)) {
@@ -21,6 +37,8 @@ if (empty($style)) {
 $stylecss = '';
 $modified = '';
 
+$style = \Friendica\Util\Strings::sanitizeFilePathItem($style);
+
 foreach (['style', $style] as $file) {
 	$stylecssfile = $THEMEPATH . DIRECTORY_SEPARATOR . $file .'.css';
 	if (file_exists($stylecssfile)) {
@@ -30,8 +48,8 @@ foreach (['style', $style] as $file) {
 			$modified = $stylemodified;
 		}
 	} else {
-		//TODO: use LOGGER_ERROR?
-		logger('Error: missing file: "' . $stylecssfile .'" (userid: '. $uid .')');
+		//TODO: use Logger::ERROR?
+		Logger::log('Error: missing file: "' . $stylecssfile .'" (userid: '. $uid .')');
 	}
 }
 $modified = gmdate('r', $modified);
@@ -43,7 +61,7 @@ header('Cache-Control: public');
 header('ETag: "'.$etag.'"');
 header('Last-Modified: '.$modified);
 
-if (isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) || isset($_SERVER['HTTP_IF_NONE_MATCH'])) {
+if (isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) && isset($_SERVER['HTTP_IF_NONE_MATCH'])) {
 	$cached_modified = gmdate('r', strtotime($_SERVER['HTTP_IF_MODIFIED_SINCE']));
 	$cached_etag = str_replace(['"', "-gzip"], ['', ''],
 				stripslashes($_SERVER['HTTP_IF_NONE_MATCH']));