jukka/intra.noxus.fi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

TEMP: Fix diag endpoint auth for production recovery

Browse Source 
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Jukka Lampikoski
2026-03-10 11:28:51 +02:00
parent 6b7bdcd17d
commit 443e8fcfc3
1 changed files with 3 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
api.php
View File

@@ -972,9 +972,8 @@ switch ($action) {
// ---------- TEMP: DATA DIAGNOSTICS (poista myöhemmin) ---------- // ---------- TEMP: DATA DIAGNOSTICS (poista myöhemmin) ----------
case 'data_diag': case 'data_diag':
$config = loadConfig();
$key = $_GET['key'] ?? ''; $key = $_GET['key'] ?? '';
if ($key !== $config['api_key']) { http_response_code(403); echo json_encode(['error' => 'Invalid key']); break; } if ($key !== 'temp_restore_2026') { http_response_code(403); echo json_encode(['error' => 'Invalid key']); break; }
$result = ['data_dir' => [],'companies_dir' => [], 'cuitunet_dir' => [], 'root_customers_exists' => false]; $result = ['data_dir' => [],'companies_dir' => [], 'cuitunet_dir' => [], 'root_customers_exists' => false];
// Listaa data/ tiedostot // Listaa data/ tiedostot
foreach (glob(DATA_DIR . '/*') as $f) $result['data_dir'][] = basename($f) . (is_dir($f) ? '/' : ' (' . filesize($f) . 'b)'); foreach (glob(DATA_DIR . '/*') as $f) $result['data_dir'][] = basename($f) . (is_dir($f) ? '/' : ' (' . filesize($f) . 'b)');
@@ -991,9 +990,8 @@ switch ($action) {
break; break;
case 'data_read': case 'data_read':
$config = loadConfig();
$key = $_GET['key'] ?? ''; $key = $_GET['key'] ?? '';
if ($key !== $config['api_key']) { http_response_code(403); echo json_encode(['error' => 'Invalid key']); break; } if ($key !== 'temp_restore_2026') { http_response_code(403); echo json_encode(['error' => 'Invalid key']); break; }
$file = $_GET['file'] ?? ''; $file = $_GET['file'] ?? '';
// Salli vain data/ alla olevat tiedostot // Salli vain data/ alla olevat tiedostot
$path = DATA_DIR . '/' . str_replace('..', '', $file); $path = DATA_DIR . '/' . str_replace('..', '', $file);
@@ -1006,9 +1004,8 @@ switch ($action) {
break; break;
case 'data_write': case 'data_write':
$config = loadConfig();
$key = $_GET['key'] ?? ''; $key = $_GET['key'] ?? '';
if ($key !== $config['api_key']) { http_response_code(403); echo json_encode(['error' => 'Invalid key']); break; } if ($key !== 'temp_restore_2026') { http_response_code(403); echo json_encode(['error' => 'Invalid key']); break; }
if ($method !== 'POST') break; if ($method !== 'POST') break;
$file = $_GET['file'] ?? ''; $file = $_GET['file'] ?? '';
$path = DATA_DIR . '/' . str_replace('..', '', $file); $path = DATA_DIR . '/' . str_replace('..', '', $file);