ChatGPT's update to harden software and run db updates.

2026-10-21 06:53:45 -04:00
parent 1e63076123
commit acc8cb70f5
171 changed files with 9325 additions and 404 deletions
@@ -0,0 +1,27 @@
+<?php
+if(PHP_SAPI!=='cli')exit;
+require __DIR__.'/../classes/Base.php';
+if(!preg_match('/\Ahcr_http_test_[a-f0-9]{12}\z/',getenv('HCR_DB_NAME')?:''))throw new RuntimeException('Disposable database required.');
+ob_start();session_start();
+class SilentRaceMfa extends MfaService {protected function notify(array $account,string $event):void {}}
+$mfa=new SilentRaceMfa();$password='Admin test password 123!';
+if(($argv[1]??'')==='seed'){
+    (new AuthService())->login('admin@example.test',$password);
+    $secret=OTPHP\TOTP::generate(new MfaClock())->getSecret();
+    $_SESSION['mfa_pending']=['user'=>1,'secret'=>$secret,'expires'=>time()+600];
+    $codes=$mfa->enroll(1,$secret,OTPHP\TOTP::createFromSecret($secret,new MfaClock())->now(),$password);
+    $base=$_SESSION;$states=[];
+    foreach([$codes[0],$codes[1]] as $code){$_SESSION=$base;$mfa->beginReplacement(1,$code,$password);$states[]=$_SESSION;}
+    ob_clean();echo json_encode(['states'=>$states,'recovery'=>$codes[2]]);ob_end_flush();exit;
+}
+$payload=json_decode(trim(fgets(STDIN)),true,512,JSON_THROW_ON_ERROR);$_SESSION=$payload['state'];
+ob_clean();fwrite(STDOUT,"READY\n");fflush(STDOUT);fgets(STDIN);
+try{
+    if($argv[1]==='replace'){
+        $secret=$_SESSION['mfa_replacement']['secret'];
+        $codes=$mfa->completeReplacement(1,OTPHP\TOTP::createFromSecret($secret,new MfaClock())->now(),$password);
+        $ok=count($codes)===10;
+    }else $ok=$mfa->verify(1,$payload['recovery'],$password);
+    $result=['ok'=>$ok];
+}catch(AppException $error){$result=['ok'=>false,'status'=>$error->status];}
+ob_clean();echo json_encode($result);ob_end_flush();