a.andreev/gallery-for-aav
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Admin/Public: add admin basic auth and async comment feedback

Browse Source
This commit is contained in:
a.andreev
2026-02-21 14:38:05 +03:00
parent 034feed282
commit 529df24013
2 changed files with 128 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin.php
+13
View File
@@ -17,6 +17,19 @@ if (!is_file($configPath)) {
exit('deploy-config.php not found');
}
$config = require $configPath;
$basicUser = (string)($config['basic_auth_user'] ?? '');
$basicPass = (string)($config['basic_auth_pass'] ?? '');
if ($basicUser !== '' || $basicPass !== '') {
$authUser = (string)($_SERVER['PHP_AUTH_USER'] ?? '');
$authPass = (string)($_SERVER['PHP_AUTH_PW'] ?? '');
if (!hash_equals($basicUser, $authUser) || !hash_equals($basicPass, $authPass)) {
header('WWW-Authenticate: Basic realm="Admin"');
http_response_code(401);
exit('Unauthorized');
}
}
$tokenExpected = (string)($config['token'] ?? '');
$tokenIncoming = (string)($_REQUEST['token'] ?? '');
if ($tokenExpected === '' || !hash_equals($tokenExpected, $tokenIncoming)) {