varaverk: add media, confform, script API/include files (from previous session)

media.php: Emby/Jellyfin/Plex session poller for Streams card confform.php: conf file form helpers for Config tab script.php: per-script run/log API endpoint for Scheduler tab
2026-05-24 10:59:13 -04:00
parent 279ac156c2
commit b2e937526f
5 changed files with 514 additions and 0 deletions
@@ -0,0 +1,43 @@
+<?php
+header('Content-Type: application/json');
+require_once dirname(__DIR__) . '/include/scheduler.php';
+require_once dirname(__DIR__) . '/include/confform.php';
+
+if ($_SERVER['REQUEST_METHOD'] === 'GET') {
+    $id = trim($_GET['id'] ?? '');
+    if (!$id || str_contains($id, '..')) {
+        echo json_encode(['ok' => false, 'error' => 'Invalid id']);
+        exit;
+    }
+    $groups = vv_conf_fields_for_script($id);
+    echo json_encode(['ok' => true, 'groups' => $groups]);
+    exit;
+}
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    $id      = trim($_POST['id']      ?? '');
+    $rawJson = $_POST['changes'] ?? '[]';
+
+    if (!$id) { echo json_encode(['ok' => false, 'error' => 'Missing id']); exit; }
+
+    $changes = json_decode($rawJson, true);
+    if (!is_array($changes)) { echo json_encode(['ok' => false, 'error' => 'Invalid changes']); exit; }
+
+    $allowed = vv_get_conf_files();
+    foreach ($changes as $c) {
+        if (empty($c['file']) || !in_array($c['file'], $allowed, true)) {
+            echo json_encode(['ok' => false, 'error' => 'Unauthorized file: ' . ($c['file'] ?? '')]);
+            exit;
+        }
+        if (empty($c['key']) || !preg_match('/^[A-Z_][A-Z0-9_]*$/', $c['key'])) {
+            echo json_encode(['ok' => false, 'error' => 'Invalid key: ' . ($c['key'] ?? '')]);
+            exit;
+        }
+    }
+
+    $results = vv_conf_write_changes($changes);
+    echo json_encode(['ok' => !in_array(false, $results, true), 'files' => $results]);
+    exit;
+}
+
+echo json_encode(['ok' => false, 'error' => 'Method not allowed']);