soheilkhaledabadi/safe-paste
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update -> add new log and analytices users

Browse Source
This commit is contained in:
soheil khaledabadi
2026-04-10 12:01:36 +03:30
parent 119b3d2db4
commit a6a414c2f5
7 changed files with 202 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
app/controllers/SaveController.php
View File

@@ -1,10 +1,16 @@
<?php
require_once __DIR__ . '/../core/security.php';
require_once __DIR__ . '/../core/logger.php';
$pdo = require __DIR__ . '/../core/db.php';
require_once __DIR__ . '/../models/Paste.php';
require_once __DIR__ . '/../models/Analytics.php';
$config = require __DIR__ . '/../config/config.php';
$logger = new Logger('save');
$analytics = new Analytics($pdo);
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
$logger->warning('Non-POST request to save endpoint', ['method' => $_SERVER['REQUEST_METHOD']]);
header('Location: /');
exit;
}
@@ -14,6 +20,8 @@ $password = $_POST['password'] ?? '';
$expire = isset($_POST['expire']) ? (int)$_POST['expire'] : 0;
if ($text === '') {
$logger->warning('Empty paste submission attempt');
$analytics->record('paste_validation_failed', null, ['reason' => 'empty_text']);
jsonResponse(['success' => false, 'message' => 'Text cannot be empty.'], 422);
}
@@ -23,7 +31,28 @@ $password_hash = $password !== '' ? password_hash($password, PASSWORD_DEFAULT) :
$expire_time = $expire > 0 ? time() + $expire : null;
$paste = new Paste($pdo);
$paste->save($id, $enc['cipher'], $enc['iv'], $expire_time, $password_hash);
$saved = $paste->save($id, $enc['cipher'], $enc['iv'], $expire_time, $password_hash);
if (!$saved) {
$logger->error('Failed to save paste to storage', ['id' => $id]);
$analytics->record('paste_save_failed', $id);
jsonResponse(['success' => false, 'message' => 'Failed to save paste. Please try again.'], 500);
}
$charCount = mb_strlen($text, 'UTF-8');
$logger->info('Paste created', [
'id' => $id,
'char_count' => $charCount,
'has_password' => $password_hash !== null,
'expires_in' => $expire > 0 ? "{$expire}s" : 'never',
]);
$analytics->record('paste_created', $id, [
'char_count' => $charCount,
'has_password' => $password_hash !== null,
'expire_secs' => $expire > 0 ? $expire : null,
'storage' => $expire_time !== null ? 'redis' : 'mysql',
]);
$base = rtrim($config['app']['base_url'] ?: ('http' . (isset($_SERVER['HTTPS']) ? 's' : '') . '://' . $_SERVER['HTTP_HOST']), '/');
$url = $base . '/view/' . $id;

31
app/controllers/ViewController.php
View File

@@ -1,12 +1,19 @@
<?php
require_once __DIR__ . '/../core/security.php';
require_once __DIR__ . '/../core/logger.php';
$pdo = require __DIR__ . '/../core/db.php';
require_once __DIR__ . '/../models/Paste.php';
require_once __DIR__ . '/../models/Analytics.php';
$config = require __DIR__ . '/../config/config.php';
$logger = new Logger('view');
$analytics = new Analytics($pdo);
$id = preg_replace('/[^a-f0-9]/i', '', $_GET['id'] ?? '');
if ($id === '') {
$logger->warning('View request with invalid or missing paste ID', ['raw_id' => $_GET['id'] ?? '']);
$analytics->record('paste_not_found', null, ['reason' => 'invalid_id']);
$errorCode = 404;
$errorMessage = 'Invalid paste ID.';
require __DIR__ . '/../../public/error.php';
@@ -17,6 +24,8 @@ $paste = new Paste($pdo);
$data = $paste->get($id);
if (!$data) {
$logger->info('Paste not found', ['id' => $id]);
$analytics->record('paste_not_found', $id);
$errorCode = 404;
$errorMessage = 'Paste not found.';
require __DIR__ . '/../../public/error.php';
@@ -24,33 +33,49 @@ if (!$data) {
}
if ($data['expire_time'] !== null && time() > (int)$data['expire_time']) {
$logger->info('Expired paste accessed', ['id' => $id, 'expired_at' => $data['expire_time']]);
$analytics->record('paste_expired', $id, ['expired_at' => $data['expire_time']]);
$errorCode = 410;
$errorMessage = 'This paste has expired.';
require __DIR__ . '/../../public/error.php';
exit;
}
$needsPassword = (bool)$data['password_hash'];
$wrongPassword = false;
$decrypted = null;
$needsPassword = (bool)$data['password_hash'];
$wrongPassword = false;
$decrypted = null;
if ($needsPassword) {
$submitted = $_POST['password'] ?? null;
if ($submitted !== null) {
if (password_verify($submitted, $data['password_hash'])) {
$needsPassword = false;
$logger->info('Paste unlocked successfully', ['id' => $id]);
$analytics->record('paste_unlocked', $id);
} else {
$wrongPassword = true;
$logger->warning('Failed password attempt for paste', ['id' => $id]);
$analytics->record('paste_failed_password', $id);
}
} else {
$analytics->record('paste_password_prompt', $id);
}
}
if (!$needsPassword) {
$decrypted = decryptText($data['encrypted_text'], $data['iv'], $config['app']['master_key']);
if ($decrypted === false) {
$logger->error('Decryption failed for paste', ['id' => $id]);
$analytics->record('paste_decrypt_error', $id);
$errorCode = 500;
$errorMessage = 'Decryption failed. The paste may be corrupted.';
require __DIR__ . '/../../public/error.php';
exit;
}
$logger->info('Paste viewed', ['id' => $id, 'char_count' => mb_strlen($decrypted, 'UTF-8')]);
$analytics->record('paste_viewed', $id, [
'char_count' => mb_strlen($decrypted, 'UTF-8'),
'has_expiry' => $data['expire_time'] !== null,
]);
}