mirror of
https://github.com/itflow-org/itflow
synced 2026-08-10 09:37:15 +00:00
37 lines
1.4 KiB
PHP
37 lines
1.4 KiB
PHP
<?php
|
|
/*
|
|
* ITFlow - Admin GET/POST request handler
|
|
*/
|
|
|
|
require_once __DIR__ . "/../config.php";
|
|
require_once __DIR__ . "/../functions.php";
|
|
require_once __DIR__ . "/../includes/check_login.php";
|
|
|
|
// Only allow running post files via inclusion (prevents people/bots poking them directly)
|
|
define('FROM_POST_HANDLER', true);
|
|
|
|
// Load all admin module POST logic.
|
|
// *_model.php is a RESERVED suffix: those files are not handlers, they are inline
|
|
// field-parsing fragments that read $_POST at include time, so the glob must not
|
|
// pull them in. A handler named *_model.php is silently never loaded - name entity
|
|
// handlers around it (admin/post/ai_models.php, not ai_model.php).
|
|
if (!empty($session_is_admin)) {
|
|
foreach (glob(__DIR__ . "/post/*.php") as $admin_module) {
|
|
if (!str_ends_with($admin_module, '_model.php')) {
|
|
require_once $admin_module;
|
|
}
|
|
}
|
|
}
|
|
|
|
// Logout is shared between portals
|
|
require_once __DIR__ . "/../post/logout.php";
|
|
require_once __DIR__ . "/../post/misc.php";
|
|
|
|
// Every handler above exits or redirects, so getting here means no handler claimed
|
|
// the request - a blank page and no trace of why. Log it; the usual cause is a
|
|
// handler file that never loaded.
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
$unhandled = implode(', ', array_slice(array_keys($_POST), 0, 10));
|
|
logApp('Request', 'warning', "Unhandled POST to admin/post.php - no handler matched. Fields: $unhandled");
|
|
}
|