Add enabled switch to control access to the script

rubenreyes2000 · rubenreyes2000 · commit 37508be65611 · 2017-02-16T08:50:59.000-05:00
diff --git a/deploy-config.orig.php b/deploy-config.orig.php
@@ -5,6 +5,14 @@
  * Documentation: https://github.com/Lyquix/php-git-deploy
  */
 
+/*
+ * ENABLED
+ * Set to false to prevent the execution of this script
+ * Useful to control activation of this script only when needed
+ *
+ */
+define('ENABLED', true);
+
 /*
  * REMOTE_REPOSITORY:
  * Address of the remote Git repo. For private repos use the SSH address 
diff --git a/deploy.php b/deploy.php
@@ -29,6 +29,7 @@ function removeLockFile() {
 
 // Check configuration errors
 $err = array();
+if (!defined('ENABLED')) $err[] = 'Enabled flag is not configured';
 if (!defined('ACCESS_TOKEN')) $err[] = 'Access token is not configured';
 if (!defined('REMOTE_REPOSITORY')) $err[] = 'Remote repository is not configured';
 if (!defined('BRANCH')) $err[] = 'Branch is not configured';
@@ -37,15 +38,15 @@ function removeLockFile() {
 if (!defined('TIME_LIMIT')) define('TIME_LIMIT', 60);
 
 // If there's authorization error, set the correct HTTP header.
-if (!isset($_GET['t']) || $_GET['t'] !== ACCESS_TOKEN || ACCESS_TOKEN === '') {
+if (!isset($_GET['t']) || $_GET['t'] !== ACCESS_TOKEN || ACCESS_TOKEN === '' || ENABLED !== true) {
 	header($_SERVER['SERVER_PROTOCOL'] . ' 403 Forbidden', true, 403);
 }
 
 // Prevent caching
 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
 header("Cache-Control: post-check=0, pre-check=0", false);
 header("Pragma: no-cache");
-if (!isset($_GET['t']) || $_GET['t'] !== ACCESS_TOKEN) {
+if (!isset($_GET['t']) || $_GET['t'] !== ACCESS_TOKEN || ENABLED !== true) {
 	header($_SERVER['SERVER_PROTOCOL'] . ' 403 Forbidden', true, 403);
 	removeLockFile();
 	echo "<html>\n<body>\n<h2>Access Denied</h2>\n</body>\n</html>\n";
