likely the last commit had a serious vulnerability. this is just a sync

2025-06-10 10:46:22 -06:00
parent becfbc3628
commit ae76b11a87
8 changed files with 304 additions and 324 deletions
@@ -39,6 +39,12 @@ if (isset($_POST['ajaxId'])) {
        case 'viewEssay':
            handleViewEssay();
            break;
+        case 'viewTodo':
+            handleViewTodo();
+            break;
+        case 'todoStatusChange':
+            handleTodoStatusChange();
+            break;
    }
 } else if (isset($_POST['formID'])) {
    switch ($_POST['formID']) {
@@ -64,6 +70,21 @@ if (isset($_POST['ajaxId'])) {
        header('Location: ' . $_POST['redirect']);
 }

+function handleViewTodo()
+{
+    if (!isset($_POST['space']) || !is_int($_POST['space']))
+        return;
+
+    $user = unserialize($_SESSION['user']);
+    // TODO: Add checks here if the user is authorized. JWT stuff.
+}
+
+function handleTodoStatusChange()
+{
+    if (!isset($_POST['id']) || !isset($_POST['status']) || !is_int($_POST['id']) || !is_string($_POST['status']))
+        return;
+}
+
 function handleViewEssay()
 {
    if (!isset($_POST['id']))