From b931e5c607e0bac820a2fc4eb13187cf469e666d Mon Sep 17 00:00:00 2001 From: Ryan Date: Wed, 19 Mar 2025 17:06:39 -0400 Subject: [PATCH] not needed stuff removed --- auth.js | 1 - fileManager.js | 3 --- index.html | 1 - logout.php | 13 ++++++++----- 4 files changed, 8 insertions(+), 10 deletions(-) diff --git a/auth.js b/auth.js index e215663..142d177 100644 --- a/auth.js +++ b/auth.js @@ -15,7 +15,6 @@ function initAuth() { username: document.getElementById("loginUsername").value.trim(), password: document.getElementById("loginPassword").value.trim() }; - console.log("Sending login data:", formData); // Include CSRF token header with login sendRequest("auth.php", "POST", formData, { "X-CSRF-Token": window.csrfToken }) .then(data => { diff --git a/fileManager.js b/fileManager.js index 9229311..5258dad 100644 --- a/fileManager.js +++ b/fileManager.js @@ -867,7 +867,6 @@ function adjustEditorSize() { if (modal && window.currentEditor) { const modalHeight = modal.getBoundingClientRect().height || 600; const newEditorHeight = Math.max(modalHeight * 0.80, 5) + "px"; - console.log("Adjusting editor height to:", newEditorHeight); window.currentEditor.setSize("100%", newEditorHeight); } } @@ -881,7 +880,6 @@ function observeModalResize(modal) { } export function editFile(fileName, folder) { - console.log("Edit button clicked for:", fileName); let existingEditor = document.getElementById("editorContainer"); if (existingEditor) { existingEditor.remove(); @@ -895,7 +893,6 @@ export function editFile(fileName, folder) { fetch(fileUrl, { method: "HEAD" }) .then(response => { const contentLength = response.headers.get("Content-Length"); - console.log("Content-Length:", contentLength); if (!contentLength || parseInt(contentLength) > 10485760) { showToast("This file is larger than 10 MB and cannot be edited in the browser."); throw new Error("File too large."); diff --git a/index.html b/index.html index 10adfaf..fe8dc37 100644 --- a/index.html +++ b/index.html @@ -329,7 +329,6 @@ - diff --git a/logout.php b/logout.php index b18646b..9c0a251 100644 --- a/logout.php +++ b/logout.php @@ -2,15 +2,18 @@ session_start(); $headers = array_change_key_case(getallheaders(), CASE_LOWER); $receivedToken = isset($headers['x-csrf-token']) ? trim($headers['x-csrf-token']) : ''; -if ($receivedToken !== $_SESSION['csrf_token']) { - echo json_encode(["error" => "Invalid CSRF token"]); - http_response_code(403); - exit; + +// Fallback: If a CSRF token exists in the session and doesn't match the one provided, +// log the mismatch but proceed with logout. +if (isset($_SESSION['csrf_token']) && $receivedToken !== $_SESSION['csrf_token']) { + // Optionally log this event: + error_log("CSRF token mismatch on logout. Proceeding with logout."); } + $_SESSION = []; // Clear session data session_destroy(); // Destroy session header('Content-Type: application/json'); echo json_encode(["success" => "Logged out"]); exit; -?> +?> \ No newline at end of file