Gmer4Lfe
d0b842a489
All fetch() POSTs now send application/x-www-form-urlencoded with the page-injected csrf_token, satisfying unRAID's auto_prepend CSRF check. All PHP API handlers switched from php://input JSON to $_POST. Also adds Dry Run button (orange, between Run and Log) that sets DRY_RUN=1 in the script environment before executing.
22 lines
655 B
PHP
22 lines
655 B
PHP
<?php
|
|
header('Content-Type: application/json');
|
|
require_once dirname(__DIR__) . '/include/scheduler.php';
|
|
|
|
$id = trim($_POST['id'] ?? '');
|
|
$enabled = (bool)($_POST['enabled'] ?? false);
|
|
$cron = trim($_POST['cron'] ?? '');
|
|
|
|
if (!$id) {
|
|
echo json_encode(['ok' => false, 'error' => 'Missing id']);
|
|
exit;
|
|
}
|
|
|
|
// Basic cron validation — 5 fields or empty
|
|
if ($cron && !preg_match('/^(\S+\s+){4}\S+$/', $cron)) {
|
|
echo json_encode(['ok' => false, 'error' => 'Invalid cron expression']);
|
|
exit;
|
|
}
|
|
|
|
$ok = vv_schedule_update($id, $enabled, $cron);
|
|
echo json_encode(['ok' => $ok, 'error' => $ok ? null : 'Failed to write schedule']);
|