mattia/BiblioMxWeb
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

New auth method

Browse Source
This commit is contained in:
MatMasIt 2022-01-31 09:53:40 +01:00 committed by GitHub
parent 40dd7728df
commit 18ea8f5268
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 23 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

49
server/up.php
View File

@ -1,37 +1,30 @@
<?php <?php
require("processCsv.php"); require("processCsv.php");
function filterName($s){ if (!function_exists('getallheaders')) {
$arr=str_split($s); function getallheaders() {
$fs=""; $headers = [];
$allowedChars=str_split("ABCDEFGHIJLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-"); foreach ($_SERVER as $name => $value) {
foreach($arr as $c){ if (substr($name, 0, 5) == 'HTTP_') {
if(in_array($c,$allowedChars)) $fs.=$c; $headers[str_replace(' ', '-', ucwords(strtolower(str_replace('_', ' ', substr($name, 5)))))] = $value;
} }
return $fs;
} }
return $headers;
$f=file("php://input");
$AUTH="xmeQCwqrQcSQ7TQX2Yyw";
if(trim($f[0])!=$AUTH) echo "UNAUTHORIZED";
$nonce=trim($f[1]);
$command=trim($f[2]);
switch($command){
case "BEGIN":
$files=glob("data/*.csv");
array_diff($files,["data/current.csv"]);
foreach($files as $ff){
unlink($ff);
} }
echo "BEGIN"; }
$headers = getallheaders();
$f = file_get_contents($_FILES['file']['tmp_name']);
$f=explode("\n",file_get_contents("php://input"));
$AUTH="3";
file_put_contents("dump.txt",$f,FILE_APPEND);
if(trim($headers["Authorization"])!=$AUTH) echo "UNAUTHORIZED";
$nonce = md5($headers["X-Nonce"]);
$intent = $headers["X-Intent"];
switch($intent){
case "W":
file_put_contents("data/".$nonce.".csv",FILE_APPEND);
break; break;
case "WRITE": case "C":
for($i=3;$i<count($f);$i++){ rename("data/".$nonce.".csv","data/current.csv");
file_put_contents("data/".filterName($nonce).".csv",$f[$i],FILE_APPEND);
}
echo "PROCEED";
break;
case "CONCLUDE":
rename("data/".filterName($nonce).".csv","data/current.csv");
processCsv(); processCsv();
echo "OK"; echo "OK";
break; break;