|
20 | 20 | Autoloader::register(); |
21 | 21 |
|
22 | 22 | // Check IP, deny access if not allowed |
23 | | -if(!(empty(Config::ACCESS_IP) OR $_SERVER['REMOTE_ADDR'] == "127.0.0.1" OR $_SERVER['REMOTE_ADDR'] == "::1" OR $_SERVER['REMOTE_ADDR'] == Config::ACCESS_IP)){ |
| 23 | +if(!(empty(Config::ACCESS_IP) || $_SERVER['REMOTE_ADDR'] == "127.0.0.1" || $_SERVER['REMOTE_ADDR'] == "::1" || $_SERVER['REMOTE_ADDR'] == Config::ACCESS_IP)){ |
24 | 24 | header('Location: login.html'); |
25 | 25 | exit; |
26 | 26 | } |
27 | 27 |
|
28 | 28 | // Cronjob Rule Run |
29 | | -if(isset($_GET['job']) AND $_GET['job'] === substr(hash('sha256', Config::PASSWORD."ebe8d532"),0,24)){ |
| 29 | +if((isset($_GET['job']) && $_GET['job'] === substr(hash('sha256', Config::PASSWORD."ebe8d532"),0,24)) || (isset($argc) && $argv[1] === substr(hash('sha256', Config::PASSWORD."ebe8d532"),0,24))){ |
30 | 30 | require_once 'src/Utility.php'; |
31 | 31 | $bitcoind = new jsonRPCClient('http://'.Config::RPC_USER.':'.Config::RPC_PASSWORD.'@'.Config::RPC_IP.'/'); |
32 | 32 | Rule::run(); |
|
39 | 39 | $passToken = hash('sha256', Config::PASSWORD."ibe81rn6"); |
40 | 40 |
|
41 | 41 | // Active Session |
42 | | -if(isset($_SESSION['login']) AND $_SESSION['login'] === TRUE){ |
| 42 | +if(isset($_SESSION['login']) && $_SESSION['login'] === TRUE){ |
43 | 43 | // Nothing needs to be done |
44 | 44 |
|
45 | 45 | // Login Cookie available |
46 | | -}elseif(isset($_COOKIE["Login"]) AND $_COOKIE["Login"] == $passToken){ |
| 46 | +}elseif(isset($_COOKIE["Login"]) && $_COOKIE["Login"] == $passToken){ |
47 | 47 | $_SESSION['login'] = TRUE; |
48 | 48 | $_SESSION["csfrToken"] = hash('sha256', random_bytes(20)); |
49 | 49 |
|
50 | 50 | // Login |
51 | | -}elseif(!isset($_SESSION['login']) AND isset($_POST['password']) AND $_POST['password'] == Config::PASSWORD){ |
| 51 | +}elseif(!isset($_SESSION['login']) && isset($_POST['password']) && $_POST['password'] == Config::PASSWORD){ |
52 | 52 | $passHashed = hash('sha256', Config::PASSWORD); |
53 | 53 | $_SESSION['login'] = TRUE; |
54 | 54 | $_SESSION["csfrToken"] = hash('sha256', random_bytes(20)); |
|
73 | 73 |
|
74 | 74 | // Content |
75 | 75 | // Main Page |
76 | | -if(empty($_GET) OR $_GET['p'] == "main") { |
| 76 | +if(empty($_GET) || $_GET['p'] == "main") { |
77 | 77 | try{ |
78 | 78 | $content = createMainContent(); |
79 | 79 | }catch(\Exception $e) { |
|
85 | 85 | }elseif($_GET['p'] == "peers") { |
86 | 86 |
|
87 | 87 | // Check if command |
88 | | - if(isset($_GET['c']) AND $_GET['t'] == $_SESSION["csfrToken"]){ |
| 88 | + if(isset($_GET['c']) && $_GET['t'] == $_SESSION["csfrToken"]){ |
89 | 89 | // Ban Command |
90 | 90 | if($_GET['c'] == "ban"){ |
91 | 91 | $err = 0; |
|
161 | 161 |
|
162 | 162 | $hosterList = json_decode(file_get_contents('data/hoster.json'),true); |
163 | 163 |
|
164 | | - if(isset($_GET['c']) AND $_GET['t'] == $_SESSION["csfrToken"]){ |
| 164 | + if(isset($_GET['c']) && $_GET['t'] == $_SESSION["csfrToken"]){ |
165 | 165 | // Remove Hoster Command |
166 | 166 | if($_GET['c'] == "remove"){ |
167 | 167 | if(preg_match("/^[0-9a-zA-Z-,\. ]{3,40}$/", $_GET['n'])) { |
|
204 | 204 | }elseif($_GET['p'] == "banlist") { |
205 | 205 |
|
206 | 206 | // Check if commands needs to be run |
207 | | - if(isset($_GET['c']) AND $_GET['t'] == $_SESSION["csfrToken"]){ |
| 207 | + if(isset($_GET['c']) && $_GET['t'] == $_SESSION["csfrToken"]){ |
208 | 208 | if($_GET['c'] == "unban"){ |
209 | 209 | if(preg_match("/^([0-9a-z:\.]{7,39}\/[0-9]{1,3})$/", $_GET['ip'], $match)) { |
210 | 210 | $ip = $match[1]; |
|
232 | 232 | $i = 0; |
233 | 233 | foreach($banlist as $ban){ |
234 | 234 | $timestamp = strtotime($ban[2]); |
235 | | - if(checkIpBanList($ban[0]) AND $timestamp !== FALSE){ |
| 235 | + if(checkIpBanList($ban[0]) && $timestamp !== FALSE){ |
236 | 236 | $result = $bitcoind->setban($ban[0], "add", $timestamp, true); |
237 | 237 | $i++; |
238 | 238 | } |
|
257 | 257 |
|
258 | 258 | $editID = NULL; |
259 | 259 | // Check if commands needs to be run |
260 | | - if(isset($_GET['c']) AND $_GET['t'] == $_SESSION["csfrToken"]){ |
| 260 | + if(isset($_GET['c']) && $_GET['t'] == $_SESSION["csfrToken"]){ |
261 | 261 | // Save new or edited rule |
262 | 262 | if($_GET['c'] == "save"){ |
263 | 263 | $rule = new Rule(); |
|
286 | 286 | } |
287 | 287 | // Delete single rule or all |
288 | 288 | }elseif($_GET['c'] == "delete"){ |
289 | | - if(isset($_GET['id']) AND ctype_digit($_GET['id'])){ |
| 289 | + if(isset($_GET['id']) && ctype_digit($_GET['id'])){ |
290 | 290 | $reponse = Rule::deleteByID($_GET['id']); |
291 | 291 | if($reponse){ |
292 | 292 | $message = "Rule succesfully deleted"; |
|
329 | 329 | // Memory Pool Page |
330 | 330 | }elseif($_GET['p'] == "mempool") { |
331 | 331 |
|
332 | | - if(isset($_GET['e']) AND ctype_digit($_GET['id'])){ |
| 332 | + if(isset($_GET['e']) && ctype_digit($_GET['id'])){ |
333 | 333 | $end = $_GET['e']; |
334 | 334 | }else{ |
335 | 335 | $end = Config::DISPLAY_TXS; |
|
358 | 358 | // Settings Page |
359 | 359 | }elseif($_GET['p'] == "settings") { |
360 | 360 | $geoPeers = Config::PEERS_GEO; |
361 | | - if(isset($_GET['c']) AND $_GET['t'] == $_SESSION["csfrToken"]){ |
362 | | - if(isset($_GET['c']) AND $_GET['c'] == "geosave"){ |
| 361 | + if(isset($_GET['c']) && $_GET['t'] == $_SESSION["csfrToken"]){ |
| 362 | + if(isset($_GET['c']) && $_GET['c'] == "geosave"){ |
363 | 363 | // Check if Geo Peer Tracing was changed |
364 | | - if(isset($_POST['geopeers']) AND $_POST['geopeers'] == "on"){ |
| 364 | + if(isset($_POST['geopeers']) && $_POST['geopeers'] == "on"){ |
365 | 365 | $geoPeers = "true"; |
366 | 366 | }else{ |
367 | 367 | $geoPeers = "false"; |
|
0 commit comments