167b11679d
- ShopOrderController: usunieto file_put_contents do tpay.txt (ujawnial dane platnicze)
- ShopOrderController: hardcoded sekret HotPay przeniesiony do stałej HOTPAY_HASH_SEED
- IntegrationsRepository: zastapiono raw SQL query('SELECT * FROM $table') metodą Medoo select()
- index.php + admin/index.php: usunieto RedBeanPHP (rb.php) - biblioteka byla ladowana ale nieuzywana
- libraries/rb.php: usunieto plik (536 KB, zero uzyc w kodzie aplikacji)
- Testy IntegrationsRepository zaktualizowane do nowego API (select zamiast query)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
133 lines
3.7 KiB
PHP
133 lines
3.7 KiB
PHP
<?
|
|
error_reporting( E_ALL ^ E_NOTICE ^ E_STRICT ^ E_WARNING ^ E_DEPRECATED );
|
|
if ( file_exists( 'ip.conf' ) )
|
|
{
|
|
$ips = file_get_contents( 'ip.conf' );
|
|
$ips = preg_split( "/\\r\\n|\\r|\\n/", $ips );
|
|
$ips = array_filter( $ips );
|
|
if ( is_array( $ips ) and!empty( $ips ) )
|
|
{
|
|
if ( !in_array( $_SERVER['REMOTE_ADDR'], $ips ) )
|
|
die( 'Brak dostępu.' );
|
|
}
|
|
}
|
|
|
|
function __autoload_my_classes( $classname )
|
|
{
|
|
$q = explode( '\\', $classname );
|
|
$c = array_pop( $q );
|
|
$f = '../autoload/' . implode( '/', $q ) . '/class.' . $c . '.php';
|
|
|
|
if ( file_exists( $f ) )
|
|
require_once( $f );
|
|
else
|
|
{
|
|
$f = '../autoload/' . implode( '/', $q ) . '/' . $c . '.php';
|
|
if ( file_exists( $f ) )
|
|
require_once( $f );
|
|
}
|
|
}
|
|
|
|
spl_autoload_register( '__autoload_my_classes' );
|
|
require_once '../config.php';
|
|
require_once '../libraries/medoo/medoo.php';
|
|
require_once '../libraries/phpmailer/class.phpmailer.php';
|
|
require_once '../libraries/phpmailer/class.smtp.php';
|
|
|
|
date_default_timezone_set( 'Europe/Warsaw' );
|
|
|
|
$mdb = new medoo( [
|
|
'database_type' => 'mysql',
|
|
'database_name' => $database['name'],
|
|
'server' => $database['host'],
|
|
'username' => $database['user'],
|
|
'password' => $database['password'],
|
|
'charset' => 'utf8'
|
|
] );
|
|
|
|
$settings = ( new \Domain\Settings\SettingsRepository( $mdb ) )->allSettings();
|
|
|
|
if ( file_exists( 'config.php' ) )
|
|
include 'config.php';
|
|
|
|
session_start();
|
|
|
|
if ( !isset( $_SESSION['check'] ) )
|
|
{
|
|
session_regenerate_id();
|
|
$_SESSION['check'] = true;
|
|
$_SESSION['ip'] = $_SERVER['REMOTE_ADDR'];
|
|
}
|
|
|
|
if ( $_SESSION['ip'] !== $_SERVER['REMOTE_ADDR'] )
|
|
{
|
|
session_destroy();
|
|
header( 'Location: /admin/' );
|
|
exit;
|
|
}
|
|
|
|
$langRepo = new \Domain\Languages\LanguagesRepository( $mdb );
|
|
|
|
if ( !$lang_id = \Shared\Helpers\Helpers::get_session( 'current-lang' ) )
|
|
{
|
|
$lang_id = $langRepo->defaultLanguage();
|
|
\Shared\Helpers\Helpers::set_session( 'current-lang', $lang_id );
|
|
}
|
|
|
|
if ( !$lang = \Shared\Helpers\Helpers::get_session( 'lang-' . $lang_id ) )
|
|
{
|
|
$lang = $langRepo->translations( $lang_id );
|
|
\Shared\Helpers\Helpers::set_session( 'lang-' . $lang_id, $lang );
|
|
}
|
|
|
|
$user = \Shared\Helpers\Helpers::get_session( 'user', true );
|
|
|
|
\admin\App::update();
|
|
\admin\App::special_actions();
|
|
|
|
$domain = preg_replace( '/^www\./', '', $_SERVER['SERVER_NAME'] );
|
|
$cookie_name = 'admin_remember_' . str_replace( '.', '-', $domain );
|
|
|
|
if ( isset( $_COOKIE[$cookie_name] ) && !isset( $_SESSION['user'] ) )
|
|
{
|
|
$users = new \Domain\User\UserRepository($mdb);
|
|
$payload = base64_decode($_COOKIE[$cookie_name]);
|
|
if ($payload !== false && strpos($payload, '.') !== false)
|
|
{
|
|
list($json, $sig) = explode('.', $payload, 2);
|
|
$expected_sig = hash_hmac('sha256', $json, \admin\App::APP_SECRET_KEY);
|
|
|
|
if (hash_equals($expected_sig, $sig))
|
|
{
|
|
$data = json_decode($json, true);
|
|
if ($data && isset($data['login']) && isset($data['ts']))
|
|
{
|
|
// Sprawdź czy cookie nie wygasło (14 dni)
|
|
if ((time() - $data['ts']) < (86400 * 14))
|
|
{
|
|
$user_data = $mdb->get('pp_users', '*', ['AND' => ['login' => $data['login'], 'status' => 1]]);
|
|
if ($user_data)
|
|
{
|
|
\Shared\Helpers\Helpers::set_session('user', $users->details($data['login']));
|
|
$redirect = $_SERVER['REQUEST_URI'] ?: '/admin/articles/view_list/';
|
|
header('Location: ' . $redirect);
|
|
exit;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
// Jeśli coś poszło nie tak, usuń nieprawidłowe cookie
|
|
setcookie($cookie_name, '', [
|
|
'expires' => time() - 86400,
|
|
'path' => '/',
|
|
'domain' => $domain,
|
|
'secure' => true,
|
|
'httponly' => true,
|
|
'samesite' => 'Lax',
|
|
]);
|
|
}
|
|
|
|
echo \admin\App::render();
|
|
?>
|