![]() |
Bearsampp 2026.7.11
|
Go to the source code of this file.
Variables | |
| $csrfProtectedEndpoints | |
| $proc = UtilInput::cleanPostVar('proc', 'text') | |
| $procMap | |
| if($proc !=='quickpick') if(in_array( $proc, $csrfProtectedEndpoints, true)) if(isset($procMap[$proc]) &&file_exists($procMap[$proc])) | else |
| $csrfProtectedEndpoints |
Define which endpoints require CSRF protection. Read-only endpoints (GET-like operations) don't need CSRF protection. Write operations (POST that changes state) require CSRF protection.
| $proc = UtilInput::cleanPostVar('proc', 'text') |
Definition at line 45 of file ajax.php.
Referenced by ActionExt\__construct(), ActionQuit\checkForOrphanedProcesses(), Win32Ps\findByPath(), Win32Ps\findByPid(), Win32Native\findProcessesByName(), ActionQuit\generateCleanupReport(), Win32Ps\getListProcs(), Win32Native\getProcessInfo(), Win32Native\getProcessList(), Win32Ps\killBins(), ActionStartup\killOldInstances(), Win32Native\killProcess(), Win32Native\processExists(), ActionStartup\processWindow(), and ActionQuit\terminatePhpProcesses().
| $procMap |
| if (!empty( $proc)) else |
Initialize CSRF protection Validate CSRF token for protected endpoints Check if the cleaned 'proc' parameter exists in our secure mapping. If valid, include the corresponding AJAX handler file using the pre-defined path. If not valid, return a JSON error message.