From 42a0e2f72fed0a947242b004a0fc6eb4a664174b Mon Sep 17 00:00:00 2001
From: Syndamia <kamen.d.mladenov@protonmail.com>
Date: Sat, 3 Apr 2021 16:04:28 +0300
Subject: Updated all double quotes to single quotes where possible

---
 src/controllers/DashboardLoginController.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'src/controllers/DashboardLoginController.php')

diff --git a/src/controllers/DashboardLoginController.php b/src/controllers/DashboardLoginController.php
index fe2009b..af1113e 100644
--- a/src/controllers/DashboardLoginController.php
+++ b/src/controllers/DashboardLoginController.php
@@ -6,20 +6,20 @@ class DashboardLoginController extends BaseController {
 	private static $message;
 
 	public static function get() {
-		include "views/dashboard-login.php";
+		include('views/dashboard-login.php');
 	}
 
 	public static function post() {
 		if (isset($_POST['_method'])) {
 			DashboardController::invoke();
 		}
-		else if ($_POST['username'] == "admin" && $_POST['password'] == "admin") {
+		else if ($_POST['username'] == 'admin' && $_POST['password'] == 'admin') {
 			// Load normal dashboard
 			DashboardController::get();
 		}
 		else {
-			self::$message = "Bad credentials!";
-			include "views/dashboard-login.php";
+			self::$message = 'Bad credentials!';
+			include('views/dashboard-login.php');
 		}
 	}
 }
-- 
cgit v1.3.1-23-gd82d


From 976b399f90fc5c0152f87e474e61e6065c0e7a5f Mon Sep 17 00:00:00 2001
From: Syndamia <kamen.d.mladenov@protonmail.com>
Date: Sat, 3 Apr 2021 16:25:24 +0300
Subject: Updated the comments and documentation in some controllers

---
 src/controllers/BaseController.php           | 4 ++++
 src/controllers/DashboardController.php      | 3 +++
 src/controllers/DashboardLoginController.php | 3 +++
 3 files changed, 10 insertions(+)

(limited to 'src/controllers/DashboardLoginController.php')

diff --git a/src/controllers/BaseController.php b/src/controllers/BaseController.php
index f766398..412cf25 100644
--- a/src/controllers/BaseController.php
+++ b/src/controllers/BaseController.php
@@ -1,5 +1,9 @@
 <?php
 class BaseController {
+	/**
+	 * Calls the get, post, put or delete static methods, depending on the server request method ($_SERVER['REQUEST_METHOD'])
+	 * **By default** all requests that are not POST, PUT or DELETE execute the GET request method
+	 */
 	public static function invoke() {
 		switch ($_SERVER['REQUEST_METHOD']) {
 			case 'POST': 
diff --git a/src/controllers/DashboardController.php b/src/controllers/DashboardController.php
index 80717ca..59c1090 100644
--- a/src/controllers/DashboardController.php
+++ b/src/controllers/DashboardController.php
@@ -16,6 +16,9 @@ class DashboardController extends BaseController {
 	}
 
 	public static function post() {
+		// Forms can only send POST or GET requests.
+		// EditOfferController doesn't have it's own URI, so we can't send a request.
+		// We also can't just invoke it, because that means manually changing the server's request method.
 		switch($_POST['_method']) {
 			case 'get':
 				EditOfferController::get();
diff --git a/src/controllers/DashboardLoginController.php b/src/controllers/DashboardLoginController.php
index af1113e..c6ac070 100644
--- a/src/controllers/DashboardLoginController.php
+++ b/src/controllers/DashboardLoginController.php
@@ -10,6 +10,9 @@ class DashboardLoginController extends BaseController {
 	}
 
 	public static function post() {
+		// The dashboard(controller) doesn't have it's own URI (and all requests are sent in this controller), so
+		// we can't send a request directly to dashboard.
+		// This does compromise security, but for now it will have to do.
 		if (isset($_POST['_method'])) {
 			DashboardController::invoke();
 		}
-- 
cgit v1.3.1-23-gd82d