✏ EDIT: functions.php

<?php
/**
 * Common helper functions used across the website
 */

// Escape string for output to prevent XSS
function e($string) {
    return htmlspecialchars($string, ENT_QUOTES, 'UTF-8');
}

// Truncate a string to a certain number of words
function truncate_words($text, $limit = 25, $suffix = '...') {
    $words = explode(' ', strip_tags($text));
    if (count($words) > $limit) {
        $words = array_slice($words, 0, $limit);
        return implode(' ', $words) . $suffix;
    }
    return $text;
}

// Redirect to a given URL and exit
function redirect($url) {
    header('Location: ' . $url);
    exit;
}

// Check if admin is logged in
function check_admin() {
    if (empty($_SESSION['admin_user'])) {
        redirect('login.php');
    }
}

// Generate CSRF token (for form security)
function generate_csrf_token() {
    if (empty($_SESSION['csrf_token'])) {
        $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
    }
    return $_SESSION['csrf_token'];
}

// Verify CSRF token
function verify_csrf_token($token) {
    return isset($_SESSION['csrf_token']) && hash_equals($_SESSION['csrf_token'], $token);
}

[✗] CANCEL