Reorganize event processors and update routing
- Move process_event.php from src/admin to src/processors - Move toggle_event_published.php from src/admin to src/processors - Move delete_event.php from src/admin to src/processors - Update .htaccess rewrite rules to point event processors to correct location - Keep admin_events.php and manage_events.php in admin (display pages only)
This commit is contained in:
1
src/logs/db_errors.log
Normal file
1
src/logs/db_errors.log
Normal file
@@ -0,0 +1 @@
|
||||
Database Connection Error: No such file or directoryDatabase Connection Error: No such file or directoryDatabase Connection Error: No such file or directory
|
||||
@@ -1,6 +1,11 @@
|
||||
<?php
|
||||
$rootPath = dirname(dirname(__DIR__));
|
||||
include_once($rootPath . '/header.php');
|
||||
require_once($rootPath . "/src/config/env.php");
|
||||
require_once($rootPath . "/src/config/session.php");
|
||||
require_once($rootPath . "/src/config/connection.php");
|
||||
require_once($rootPath . "/src/config/functions.php");
|
||||
// session_start();
|
||||
|
||||
checkAdmin();
|
||||
|
||||
header('Content-Type: application/json');
|
||||
@@ -49,7 +54,7 @@ if ($_GET['action'] ?? null === 'delete') {
|
||||
}
|
||||
|
||||
// Check CSRF token
|
||||
if (!isset($_POST['csrf_token']) || !verifyCsrfToken($_POST['csrf_token'])) {
|
||||
if (!isset($_POST['csrf_token']) || !validateCSRFToken($_POST['csrf_token'])) {
|
||||
echo json_encode(['status' => 'error', 'message' => 'CSRF token validation failed']);
|
||||
exit;
|
||||
}
|
||||
@@ -79,7 +84,9 @@ if (!empty($_FILES['image']['name'])) {
|
||||
|
||||
$file_name = uniqid() . '_' . basename($_FILES['image']['name']);
|
||||
$target_file = $upload_dir . $file_name;
|
||||
$file_type = mime_content_type($_FILES['image']['tmp_name']);
|
||||
$finfo = finfo_open(FILEINFO_MIME_TYPE);
|
||||
$file_type = finfo_file($finfo, $_FILES['image']['tmp_name']);
|
||||
finfo_close($finfo);
|
||||
|
||||
// Validate image file
|
||||
$allowed_types = ['image/jpeg', 'image/png', 'image/gif', 'image/webp'];
|
||||
@@ -109,7 +116,9 @@ if (!empty($_FILES['promo']['name'])) {
|
||||
|
||||
$file_name = uniqid() . '_promo_' . basename($_FILES['promo']['name']);
|
||||
$target_file = $upload_dir . $file_name;
|
||||
$file_type = mime_content_type($_FILES['promo']['tmp_name']);
|
||||
$finfo = finfo_open(FILEINFO_MIME_TYPE);
|
||||
$file_type = finfo_file($finfo, $_FILES['promo']['tmp_name']);
|
||||
finfo_close($finfo);
|
||||
|
||||
// Validate image file
|
||||
$allowed_types = ['image/jpeg', 'image/png', 'image/gif', 'image/webp'];
|
||||
Reference in New Issue
Block a user