+ Csak PNG fájl, max. 1 MB. A régi logó mentésre kerül (a 🕘 Verziókhoz hasonlóan visszavonható). A CMS-belei változás azonnal, a weboldalon a Publikálás (deploy) után jelenik meg. Ajánlott átlátszó háttérű PNG a sötét fejléchez.
+
+
+
Weboldal fejléc logója (szöveges)
+
Használat: weboldal fejléc — jelenlegi fájl: /${LOGO_TARGETS.header}
+
+
+
+
⬆ Fejléc logó cseréje
+
+
+
CMS logó (ikon)
+
Használat: CMS bejelentkező oldal — jelenlegi fájl: /${LOGO_TARGETS.icon}
+
+
+
+
⬆ Ikon logó cseréje
+
+
+
+
+
+`;
+
+module.exports = { LOGO_PAGE };
diff --git a/scripts/cms-logo.js b/scripts/cms-logo.js
new file mode 100644
index 0000000..159ec7c
--- /dev/null
+++ b/scripts/cms-logo.js
@@ -0,0 +1,92 @@
+// Logo upload handling for the Content Editor: PNG validation, timestamped
+// backup and atomic binary replace.
+const fs = require('fs');
+const path = require('path');
+
+const MAX_LOGO_BYTES = 1024 * 1024; // 1 MiB — plenty for a logo
+const PNG_MAGIC = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+
+// WHY fixed targets instead of a client-supplied filename: arbitrary write
+// paths would be a traversal risk; the two known logos are the only assets
+// the site consumes.
+const LOGO_TARGETS = {
+ icon: 'mozdit_logo.png', // CMS login page
+ header: 'mozdit_logo_text.png', // website Header
+};
+
+function isPng(buffer) {
+ return Buffer.isBuffer(buffer) && buffer.length >= PNG_MAGIC.length && buffer.subarray(0, PNG_MAGIC.length).equals(PNG_MAGIC);
+}
+
+function saveLogoAtomically(publicDir, targetKey, buffer, backupDir) {
+ const fileName = LOGO_TARGETS[targetKey];
+ if (!fileName) throw new Error('Ismeretlen logó célpont');
+ const targetFile = path.join(publicDir, fileName);
+
+ const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
+ const backupName = `${fileName}.${timestamp}.bak`;
+ fs.mkdirSync(backupDir, { recursive: true, mode: 0o700 });
+ fs.copyFileSync(targetFile, path.join(backupDir, backupName));
+
+ const tempFile = `${targetFile}.${process.pid}.${Date.now()}.tmp`;
+ fs.writeFileSync(tempFile, buffer, { mode: 0o644 });
+ fs.renameSync(tempFile, targetFile);
+ return { targetFile, backupName };
+}
+
+// WHY: route handling lives here so content-editor.js stays under the
+// 400-line limit. Returns true when the request was handled.
+function handleLogoRoutes({ req, res, u, publicDir, backupDir, writeAudit, clientAddress, user, logoPage }) {
+ if (req.method === 'GET' && u.pathname === '/branding') {
+ res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8', 'Cache-Control': 'no-store' });
+ res.end(logoPage());
+ return true;
+ }
+
+ if (req.method === 'POST' && u.pathname === '/logo') {
+ const target = u.searchParams.get('target') || '';
+ if (!LOGO_TARGETS[target]) {
+ res.writeHead(400, { 'Content-Type': 'application/json' });
+ res.end(JSON.stringify({ ok: false, error: 'Ismeretlen logó célpont.' }));
+ return true;
+ }
+ const chunks = [];
+ let total = 0;
+ let tooLarge = false;
+ req.on('data', c => {
+ total += c.length;
+ if (total > MAX_LOGO_BYTES) { tooLarge = true; return; }
+ chunks.push(c);
+ });
+ req.on('end', () => {
+ const buffer = Buffer.concat(chunks);
+ if (tooLarge) {
+ writeAudit('logo_updated', { clientAddress, user, target, result: 'request_too_large' });
+ res.writeHead(413, { 'Content-Type': 'application/json' });
+ res.end(JSON.stringify({ ok: false, error: `A fájl túl nagy (maximum ${MAX_LOGO_BYTES} byte).` }));
+ return;
+ }
+ if (!isPng(buffer)) {
+ writeAudit('logo_updated', { clientAddress, user, target, result: 'invalid_type' });
+ res.writeHead(415, { 'Content-Type': 'application/json' });
+ res.end(JSON.stringify({ ok: false, error: 'Csak érvényes PNG fájl tölthető fel.' }));
+ return;
+ }
+ try {
+ const { backupName } = saveLogoAtomically(publicDir, target, buffer, backupDir);
+ writeAudit('logo_updated', { clientAddress, user, target, result: 'ok', backup: backupName });
+ res.writeHead(200, { 'Content-Type': 'application/json' });
+ res.end(JSON.stringify({ ok: true, backup: backupName }));
+ } catch (e) {
+ writeAudit('logo_updated', { clientAddress, user, target, result: 'error' });
+ res.writeHead(500, { 'Content-Type': 'application/json' });
+ res.end(JSON.stringify({ ok: false, error: e.message }));
+ }
+ });
+ return true;
+ }
+
+ return false;
+}
+
+module.exports = { MAX_LOGO_BYTES, LOGO_TARGETS, isPng, saveLogoAtomically, handleLogoRoutes };
diff --git a/scripts/cms-pages.js b/scripts/cms-pages.js
index 5ab40bb..d1d5e12 100644
--- a/scripts/cms-pages.js
+++ b/scripts/cms-pages.js
@@ -114,6 +114,7 @@ ${message ? `})
+
+
+
+
+ })
+
+
+
+
+