payfrit/payfrit-biz
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add auto-cleanup of old temp extractions (>1 hour)

Browse source 
Security: Also added nginx rule on dev server to block CFM/PHP
execution in /temp/menu-import/ directory.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
John Mizerek 2026-02-13 07:40:10 -08:00
parent 093a3b8bce
commit ddaac523bf
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
api/setup/uploadSavedPage.cfm
View file

@ -17,6 +17,21 @@
<cfdirectory action="create" directory="#tempBaseDir#" mode="755"> <cfdirectory action="create" directory="#tempBaseDir#" mode="755">
</cfif> </cfif>
<!--- Cleanup: delete folders older than 1 hour --->
<cftry>
<cfdirectory action="list" directory="#tempBaseDir#" name="oldFolders" type="dir">
<cfset oneHourAgo = dateAdd("h", -1, now())>
<cfloop query="oldFolders">
<cfif oldFolders.dateLastModified LT oneHourAgo AND oldFolders.name NEQ "." AND oldFolders.name NEQ "..">
<cftry>
<cfdirectory action="delete" directory="#tempBaseDir#/#oldFolders.name#" recurse="true">
<cfcatch></cfcatch>
</cftry>
</cfif>
</cfloop>
<cfcatch></cfcatch>
</cftry>
<!--- Check if ZIP file was uploaded ---> <!--- Check if ZIP file was uploaded --->
<cfif NOT structKeyExists(form, "zipFile") OR form.zipFile EQ ""> <cfif NOT structKeyExists(form, "zipFile") OR form.zipFile EQ "">
<cfset response["MESSAGE"] = "No ZIP file uploaded"> <cfset response["MESSAGE"] = "No ZIP file uploaded">