Update: Refactor IP hashing method in API endpoints

asterjdm · Aug 2, 2024 · 5cef91a · 5cef91a
1 parent 4f00d47
commit 5cef91a
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/api/isBanned.php b/api/isBanned.php
@@ -10,7 +10,7 @@
 
 $db =  new Database;
 $clientIp = getClientIp();
-$hashedIp = $db->escapeStrings(hash("sha256", $clientIp . HASH_SECRET));
+$hashedIp = $db->escapeStrings(hash("sha256", $clientIp /*. HASH_SECRET*/));
 
 $bannRecords = $db->select("SELECT * FROM gargameleaks_bann WHERE IP = '$hashedIp'");
 

diff --git a/api/newComment.php b/api/newComment.php
@@ -15,7 +15,7 @@
 $smurfsId = $db->escapeStrings($_POST['smurfsId']);
 
 $clientIp = getClientIp();
-$hashedIp = $db->escapeStrings(hash("sha256", $clientIp . HASH_SECRET));
+$hashedIp = $db->escapeStrings(hash("sha256", $clientIp /*. HASH_SECRET*/));
 
 $bannRecords = $db->select("SELECT * FROM gargameleaks_bann WHERE IP = '$hashedIp'");
 

diff --git a/api/newRating.php b/api/newRating.php
@@ -1,7 +1,7 @@
 <?php
-// ini_set('display_errors', '1');
-// ini_set('display_startup_errors', '1');
-// error_reporting(E_ALL);
+ini_set('display_errors', '1');
+ini_set('display_startup_errors', '1');
+error_reporting(E_ALL);
 
 header('Content-type: application/json');
 
@@ -17,7 +17,7 @@
 $smurfsId = $db->escapeStrings($_POST["smurfsId"]);
 
 $clientIp = getClientIp();
-$hashedIp = $db->escapeStrings(hash("sha256", $clientIp . HASH_SECRET));
+$hashedIp = $db->escapeStrings(hash("sha256", $clientIp /*. HASH_SECRET*/));
 
 if (
     $intelligenceRating > 10 || $intelligenceRating <= 0 ||