fix: harden portable host installation

2026-09-01 19:26:10 +02:00
parent 5b2c64ff39
commit 323afaf832
6 changed files with 37 additions and 24 deletions
@@ -11,7 +11,7 @@ function load_dotenv(string $path): void
        if ($separator === false) continue;
        $name = trim(substr($line, 0, $separator));
        $value = trim(substr($line, $separator + 1));
-        if ($name === '' || getenv($name) !== false) continue;
+        if (!preg_match('/^[A-Za-z_][A-Za-z0-9_]*$/', $name) || getenv($name) !== false) continue;
        if (strlen($value) >= 2 && (($value[0] === '"' && $value[-1] === '"') || ($value[0] === "'" && $value[-1] === "'"))) {
            $value = substr($value, 1, -1);
        }
@@ -81,7 +81,6 @@ function ensure_initial_administrator(): void

 function current_user(): ?array
 {
-    ensure_initial_administrator();
    static $user = false;
    if ($user !== false) return $user;
    $id = $_SESSION['user_id'] ?? null;