Semi-stable version with old variable names

2026-07-16 18:43:30 +02:00
parent 3731183654
commit c8e7ce9174
165 changed files with 25654 additions and 9728 deletions
@@ -0,0 +1,41 @@
+<?php
+
+header('Content-Type: application/json');
+
+if (!isset($baseDir)) {
+	$baseDir = $_SERVER['DOCUMENT_ROOT'];
+}
+
+require_once $baseDir . '/../scripts/session_functions.php';
+
+ini_wkvs_session();
+
+check_user_permission('wk_leitung');
+
+verify_csrf();
+
+if (!isset($_POST['css_content'])) {
+    http_response_code(400);
+    echo json_encode(['success' => false, 'message' => 'Missing css_content parameter.']);
+    exit;
+}
+
+$css_content = $_POST['css_content'] ?? '';
+
+if (strlen($css_content) > 200000) {
+    http_response_code(400);
+    echo json_encode(['success' => false, 'message' => 'File size too large.']);
+    exit;
+}
+
+if (preg_match('/javascript:/i', $css_content) || preg_match('/<script/i', $css_content)) {
+    http_response_code(400);
+    echo json_encode(['success' => false, 'message' => 'Invalid characters detected.']);
+    exit;
+}
+
+file_put_contents($baseDir . '/intern/css/user.css', $css_content);
+
+http_response_code(200);
+echo json_encode(['success' => true, 'message' => 'CSS saved successfully.']);
+exit;