From e7dc728e3420c7f51f793daa70c0e46a43c367f5 Mon Sep 17 00:00:00 2001
From: sijanec <sijanecantonluka@gmail.com>
Date: Wed, 20 May 2020 13:57:10 +0200
Subject: did it work?

---
 server/report/index.php | 41 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 server/report/index.php

(limited to 'server')

diff --git a/server/report/index.php b/server/report/index.php
new file mode 100644
index 0000000..c0ac172
--- /dev/null
+++ b/server/report/index.php
@@ -0,0 +1,41 @@
+<?php
+	header("Content-Type: text/plain");
+	$warning = "this beziapp report service is here to inform the developers of client errors and stores IP address, user agent ".
+		"and error details. The error reporting is not mandatory and can be distabled in the settings. If you want to delete any of ".
+		"your personal information submitted to this server or if you want a data dump of your error entries, please send an email".
+		"to the maintainers of this beziapp reporting server (sijanecantonluka@gmail.com). We do not store any other information, ".
+		"such as usernames, so if you have a dynamic IP and it changes, there's no way of proving that you sent the reports. If ".
+		"that's the case, we won't delete or provide any error reports to you. You must have proof of IP address ownership by ".
+		"requesting a special link that we will send you via email when data deletion/dump will be requested. Again, failing the ".
+		"IP address verification process will force us into not sending or deleting any data. GDPR sucks.";
+	if($_REQUEST["type"] != "error") {
+		http_response_code(400);
+		exit("only error reports are supported on this instance. ".$warning);
+	}
+	if(empty($_REQUEST["client"]["app_version"])) {
+		http_response_code(400);
+		exit("you must provide your app version. ".$warning);
+	}
+
+	$servername = "localhost";
+	$username = "beziappreports";
+	$password = "not today!";
+	$dbname = "beziappreports";
+	$conn = new mysqli($servername, $username, $password, $dbname);
+	if ($conn->connect_error) {
+		http_response_code(500);
+		die("database connection failed. ".$warning); // . $conn->connect_error);
+	}
+	$stmt = $conn->prepare("INSERT INTO error_reports (msg, url, line, column, obj, ua, app_version, previous_commit, ip) VALUES".
+		"(?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
+	$stmt->bind_param("ssiisssss", $_REQUEST["error"]["msg"], $_REQUEST["error"]["url"], $_REQUEST["error"]["line"],
+		$_REQUEST["error"]["column"], $_REQUEST["error"]["obj"], $_REQUEST["client"]["ua"], $_REQUEST["client"]["app_version"],
+		$_REQUEST["client"]["previous_commit"], $_SERVER["REMOTE_ADDR"]);
+
+	$stmt->execute();
+
+	$stmt->close();
+	$conn->close();
+
+	exit("report saved. ".$warning);
+?>
-- 
cgit v1.2.3