PostERG/xamxam
1
0
Fork 0
mirror of https://codeberg.org/PostERG/xamxam.git synced 2026-06-25 16:19:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: upload progress bar not visible — collectFileNames checks FilePond instances; remove admin auth from progress poll endpoint

Browse Source
This commit is contained in:
Pontoporeia
2026-05-11 16:55:58 +02:00
parent d873a7f09e
commit c3f6e8a033
4 changed files with 34 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/public/admin/actions/upload-progress.php
View File

@@ -15,8 +15,10 @@
*/
require_once __DIR__ . '/../../../bootstrap.php';
require_once __DIR__ . '/../../../src/AdminAuth.php';
AdminAuth::requireLogin();
// No AdminAuth check here — this endpoint is called by client-side JS during
// both admin and partage (student) form uploads. Access is guarded by the
// progress token (64 bits of entropy, fresh per form render) which must match
// a temp file that only exists during an active upload.
header('Content-Type: application/json');