admin/Kundenverwaltung
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Zugangsdaten aus dem Code in die externe Config verschoben

Browse Source 
SMTP-Passwoerter (mail_attachment), der MySQL-Zugang von stats.php und die
Schluessel fuer OpenWeatherMap und Aeris standen im Klartext im Code. Sie
kommen jetzt aus der externen Config ($smtp_konten, $stats_mysql_*,
$openweathermap_appid, $aeris_client_*). rebuild-settings.php legt die
Eintraege bei der Ersteinrichtung leer an.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
admin
2026-09-17 09:15:22 +02:00
co-authored by Claude Opus 5
parent 73e64b72ac
commit 0dceb35502
4 changed files with 44 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
incs/funcs.php
+17 -20
View File
@@ -85,8 +85,17 @@ function PopulateSessionVars()
use PHPMailer\PHPMailer\PHPMailer;
function mail_attachment($filename, $path, $mailto, $from_mail, $from_name, $replyto, $subject, $message) {
// SMTP-Zugänge stehen in der externen Config, je Firma ein Eintrag,
// "*" gilt für alle übrigen: array("user" => "...", "pw" => "...")
global $smtp_konten;
if(isset($smtp_konten[$_SESSION["firma"]]))
$konto = $smtp_konten[$_SESSION["firma"]];
elseif(isset($smtp_konten["*"]))
$konto = $smtp_konten["*"];
else
return error("Kein SMTP-Zugang für \"".htmlspecialchars($_SESSION["firma"])."\" in der Konfiguration (\$smtp_konten).");
$mail = new PHPMailer();
$mail->IsSMTP();
@@ -97,21 +106,8 @@ function mail_attachment($filename, $path, $mailto, $from_mail, $from_name, $rep
$mail->SMTPAuth = true; // turn on SMTP authentication
$mail->SMTPSecure = "ssl";
$mail->Port = 465;
if($_SESSION["firma"] == "Wagner Markisen")
{
$mail->Username = "info@wagner-markisen.de"; // SMTP username
$mail->Password = "ENTFERNT"; // SMTP password
}
elseif($_SESSION["firma"] == "Ingenieurbüro Wagner")
{
$mail->Username = "m0w1337@gmail.com"; // SMTP username
$mail->Password = "ENTFERNT"; // SMTP password
}
else
{
$mail->Username = "wagnermarkisen12@googlemail.com"; // SMTP username
$mail->Password = "ENTFERNT"; // SMTP password
}
$mail->Username = $konto["user"];
$mail->Password = $konto["pw"];
$mail->From = $from_mail;
$mail->FromName = $from_name;
@@ -570,9 +566,10 @@ function GetWeather($plz='87509', $land='germany', $icons_src="./pics/icons/weat
{
$station = $plz."-".$land;
}
//$url[0] = "http://api.aerisapi.com/observations/immenstadt,germany?client_id=ENTFERNT&client_secret=ENTFERNT";
$url[0] = "http://api.openweathermap.org/data/2.5/weather?zip=87509,de&APPID=ENTFERNT";
$url[1] = "http://api.aerisapi.com/forecasts/immenstadt,germany?client_id=ENTFERNT&client_secret=ENTFERNT&from=today&to=+6days";
// API-Schlüssel stehen in der externen Config
global $openweathermap_appid, $aeris_client_id, $aeris_client_secret;
$url[0] = "http://api.openweathermap.org/data/2.5/weather?zip=87509,de&APPID=".urlencode($openweathermap_appid);
$url[1] = "http://api.aerisapi.com/forecasts/immenstadt,germany?client_id=".urlencode($aeris_client_id)."&client_secret=".urlencode($aeris_client_secret)."&from=today&to=+6days";
$response = file_get_contents($url[1]);