This commit is contained in:
2025-12-31 01:20:10 +01:00
parent cbcd09003e
commit da08cf706e
2 changed files with 17 additions and 6 deletions

View File

@@ -4,6 +4,20 @@ declare(strict_types=1);
// boot application (config, autoload, services) // boot application (config, autoload, services)
require_once __DIR__ . '/../config/fileload.php'; require_once __DIR__ . '/../config/fileload.php';
// Staging-Access-Protection (Basic Auth)
if (defined('APP_ENV') && APP_ENV === 'staging') {
$authUser = getenv('STAGING_AUTH_USER') ?: 'staging';
$authPass = getenv('STAGING_AUTH_PASS') ?: 'staging123';
$user = $_SERVER['PHP_AUTH_USER'] ?? null;
$pass = $_SERVER['PHP_AUTH_PW'] ?? null;
if ($user !== $authUser || $pass !== $authPass) {
header('WWW-Authenticate: Basic realm="Staging"');
header('HTTP/1.0 401 Unauthorized');
echo 'Unauthorized';
exit;
}
}
$uriPath = parse_url($_SERVER['REQUEST_URI'] ?? '/', PHP_URL_PATH) ?: '/'; $uriPath = parse_url($_SERVER['REQUEST_URI'] ?? '/', PHP_URL_PATH) ?: '/';
$uriPath = preg_replace('~/{2,}~', '/', $uriPath); $uriPath = preg_replace('~/{2,}~', '/', $uriPath);
$uriPath = trim($uriPath, '/'); $uriPath = trim($uriPath, '/');

View File

@@ -87,12 +87,9 @@ final class Search
$sql .= " LIMIT :lim"; $sql .= " LIMIT :lim";
$stmt = $this->pdo->prepare($sql); $stmt = $this->pdo->prepare($sql);
foreach ($params as $k => $v) { $execParams = $params;
$type = is_int($v) ? \PDO::PARAM_INT : \PDO::PARAM_STR; $execParams[':lim'] = $limit;
$stmt->bindValue($k, $v, $type); $stmt->execute($execParams);
}
$stmt->bindValue(':lim', $limit, \PDO::PARAM_INT);
$stmt->execute();
return $stmt->fetchAll(\PDO::FETCH_ASSOC) ?: []; return $stmt->fetchAll(\PDO::FETCH_ASSOC) ?: [];
} }
} }