From 04c214bdf6aacfe95b946c7a4d417d7a37b2c752 Mon Sep 17 00:00:00 2001 From: Hamza-Ayed Date: Mon, 3 Aug 2026 15:22:47 +0300 Subject: [PATCH] Update: 2026-08-03 15:22:47 --- backend/Admin/v2/quality/blacklist_manager.php | 9 ++++++++- backend/auth/driver/register.php | 2 +- backend/email/sendTripEmail.php | 2 +- backend/ride/rides/emailToPassengerTripDetail.php | 2 +- 4 files changed, 11 insertions(+), 4 deletions(-) diff --git a/backend/Admin/v2/quality/blacklist_manager.php b/backend/Admin/v2/quality/blacklist_manager.php index 6b4d706e..72d8051a 100644 --- a/backend/Admin/v2/quality/blacklist_manager.php +++ b/backend/Admin/v2/quality/blacklist_manager.php @@ -2,7 +2,14 @@ // Admin/v2/quality/blacklist_manager.php require_once __DIR__ . '/../../../connect.php'; require_once __DIR__ . '/../../../encrypt_decrypt.php'; -require_once __DIR__ . '/../security/audit_logs_helper.php'; // إذا كان متاحاً، وإلا سننفذ الإدخال مباشرة +// audit_logs_helper.php لم يوجد قط في المستودع، والتعليق الأصلي كان +// "إذا كان متاحاً، وإلا سننفذ الإدخال مباشرة" — لكن require_once قاتل +// لا اختياري، فكانت الشاشة تسقط دائماً. الملف اختياري فعلاً: هذا الملف +// يكتب في admin_audit_log مباشرةً أدناه. +$auditHelper = __DIR__ . '/../security/audit_logs_helper.php'; +if (file_exists($auditHelper)) { + require_once $auditHelper; +} if ($role !== 'admin' && $role !== 'super_admin') { jsonError("Unauthorized", 403); diff --git a/backend/auth/driver/register.php b/backend/auth/driver/register.php index 59fd08ad..387f3a89 100644 --- a/backend/auth/driver/register.php +++ b/backend/auth/driver/register.php @@ -128,7 +128,7 @@ try { // ====================================================== // Step 1.5: التحقق الفعلي من ملكية رقم الهاتف قبل إكمال المعالجة (سد الثغرة) // ====================================================== - require_once __DIR__ . '/../../../core/Auth/EncryptionHelper.php'; + require_once __DIR__ . '/../../core/Security/EncryptionHelper.php'; $tempEncryptionHelper = new EncryptionHelper($redis); $phoneNumber_encrypted_check = $tempEncryptionHelper->encryptData($data['phone']); diff --git a/backend/email/sendTripEmail.php b/backend/email/sendTripEmail.php index 562591f1..b235d15d 100644 --- a/backend/email/sendTripEmail.php +++ b/backend/email/sendTripEmail.php @@ -4,7 +4,7 @@ use PHPMailer\PHPMailer\PHPMailer; use PHPMailer\PHPMailer\Exception; -require_once __DIR__ . '/../../vendor/autoload.php'; +require_once __DIR__ . '/../vendor/autoload.php'; require_once __DIR__ . '/../core/bootstrap.php'; // 1. فرض المصادقة (Auth Required) diff --git a/backend/ride/rides/emailToPassengerTripDetail.php b/backend/ride/rides/emailToPassengerTripDetail.php index 2bfb64ba..0b9c86e0 100644 --- a/backend/ride/rides/emailToPassengerTripDetail.php +++ b/backend/ride/rides/emailToPassengerTripDetail.php @@ -7,7 +7,7 @@ use PHPMailer\PHPMailer\Exception; require_once __DIR__ . '/../../connect.php'; // تضمين autoload من Composer (مجلد vendor في الجذر) -require_once __DIR__ . '/../../../vendor/autoload.php'; +require_once __DIR__ . '/../../vendor/autoload.php'; // استقبال البيانات من الطلب $passengerName = filterRequest("name");