Chaospott/gitea_webhooks
8
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Spaces®; http status code header for wrong things

Browse Source
This commit is contained in:
Bandie 2021-01-13 19:30:12 +01:00
parent d67573fca7
commit 71c5b1ae92
Signed by: Bandie
GPG Key ID: 843D7FA93BA46312
1 changed files with 16 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
www/pr.php
View File

@ -3,6 +3,7 @@ include('config.php');
// check for POST request // check for POST request
if ($_SERVER['REQUEST_METHOD'] != 'POST') { if ($_SERVER['REQUEST_METHOD'] != 'POST') {
header("HTTP/1.1 405 Method Not Allowed");
error_log('FAILED - not POST - '. $_SERVER['REQUEST_METHOD']); error_log('FAILED - not POST - '. $_SERVER['REQUEST_METHOD']);
exit(); exit();
} }
@ -11,6 +12,7 @@ if ($_SERVER['REQUEST_METHOD'] != 'POST') {
$content_type = isset($_SERVER['CONTENT_TYPE']) ? strtolower(trim($_SERVER['CONTENT_TYPE'])) : ''; $content_type = isset($_SERVER['CONTENT_TYPE']) ? strtolower(trim($_SERVER['CONTENT_TYPE'])) : '';
if ($content_type != 'application/json') { if ($content_type != 'application/json') {
header("HTTP/1.1 403 Forbidden");
error_log('FAILED - not application/json - '. $content_type); error_log('FAILED - not application/json - '. $content_type);
exit(); exit();
} }
@ -19,6 +21,7 @@ if ($content_type != 'application/json') {
$payload = trim(file_get_contents("php://input")); $payload = trim(file_get_contents("php://input"));
if (empty($payload)) { if (empty($payload)) {
header("HTTP/1.1 403 Forbidden");
error_log('FAILED - no payload'); error_log('FAILED - no payload');
exit(); exit();
} }
@ -28,11 +31,13 @@ $decoded = json_decode($payload, true);
// check for json decode errors // check for json decode errors
if (json_last_error() !== JSON_ERROR_NONE) { if (json_last_error() !== JSON_ERROR_NONE) {
header("HTTP/1.1 403 Forbidden");
error_log('FAILED - json decode - '. json_last_error()); error_log('FAILED - json decode - '. json_last_error());
exit(); exit();
} }
if($decoded['secret'] != $secret_key['pr']) { if($decoded['secret'] != $secret_key['pr']) {
header("HTTP/1.1 403 Forbidden");
echo("WRONG SECRET"); echo("WRONG SECRET");
error_log('FAILED - wrong secret key'); error_log('FAILED - wrong secret key');
exit(); exit();
@ -56,5 +61,4 @@ foreach($recipients['pr'] as $recp) {
mail($recp, $subject, $message, $from); mail($recp, $subject, $message, $from);
} }
echo("SENT"); echo("SENT");
// success, do something
?> ?>