Protokoll #1534

{
    "event": "PreToolUse",
    "tool_name": "Edit",
    "tool_input": {
        "file_path": "\/var\/www\/dev.campus.systemische-tools.de\/src\/Framework\/Controller.php",
        "old_string": "    protected function view(string $name, array $data = []): void\n    {\n        extract($data);\n        $file = VIEW_PATH . '\/' . str_replace('.', '\/', $name) . '.php';",
        "new_string": "    protected function view(string $name, array $data = []): void\n    {\n        $data['csrfField'] = $this->csrfField();\n        $data['csrfToken'] = $this->csrfToken();\n        extract($data);\n        $file = VIEW_PATH . '\/' . str_replace('.', '\/', $name) . '.php';"
    }
}

{
    "tool_response": {
        "filePath": "\/var\/www\/dev.campus.systemische-tools.de\/src\/Framework\/Controller.php",
        "oldString": "    protected function view(string $name, array $data = []): void\n    {\n        extract($data);\n        $file = VIEW_PATH . '\/' . str_replace('.', '\/', $name) . '.php';",
        "newString": "    protected function view(string $name, array $data = []): void\n    {\n        $data['csrfField'] = $this->csrfField();\n        $data['csrfToken'] = $this->csrfToken();\n        extract($data);\n        $file = VIEW_PATH . '\/' . str_replace('.', '\/', $name) . '.php';",
        "originalFile": "<?php\n\nnamespace Framework;\n\nabstract class Controller\n{\n    protected function csrfToken(): string\n    {\n        return CsrfService::getToken();\n    }\n\n    protected function csrfField(): string\n    {\n        return CsrfService::getTokenField();\n    }\n\n    protected function validateCsrf(): bool\n    {\n        $token = $_POST['_csrf_token'] ?? $_SERVER['HTTP_X_CSRF_TOKEN'] ?? null;\n        return CsrfService::validateToken($token);\n    }\n\n    protected function requireCsrf(): void\n    {\n        if (!$this->validateCsrf()) {\n            http_response_code(403);\n            if ($this->isJsonRequest()) {\n                $this->json(['error' => 'CSRF token invalid'], 403);\n            } else {\n                echo 'CSRF token invalid';\n            }\n            exit;\n        }\n    }\n\n    private function isJsonRequest(): bool\n    {\n        $accept = $_SERVER['HTTP_ACCEPT'] ?? '';\n        $contentType = $_SERVER['CONTENT_TYPE'] ?? '';\n        return str_contains($accept, 'application\/json') || str_contains($contentType, 'application\/json');\n    }\n\n    protected function view(string $name, array $data = []): void\n    {\n        extract($data);\n        $file = VIEW_PATH . '\/' . str_replace('.', '\/', $name) . '.php';\n\n        if (file_exists($file)) {\n            require $file;\n        } else {\n            throw new \\Exception(\"View not found: {$name}\");\n        }\n    }\n\n    protected function json(mixed $data, int $status = 200): void\n    {\n        http_response_code($status);\n        header('Content-Type: application\/json');\n        echo json_encode($data, JSON_UNESCAPED_UNICODE);\n    }\n\n    protected function redirect(string $url): void\n    {\n        header(\"Location: {$url}\");\n        exit;\n    }\n\n    \/**\n     * @return array<string, mixed>\n     *\/\n    protected function getJsonInput(): array\n    {\n        $input = file_get_contents('php:\/\/input');\n        if ($input === false || $input === '') {\n            return [];\n        }\n\n        $decoded = json_decode($input, true);\n        if (!is_array($decoded)) {\n            return [];\n        }\n\n        return $decoded;\n    }\n\n    protected function jsonError(string $message, int $status = 500): void\n    {\n        $this->json(['success' => false, 'error' => $message], $status);\n    }\n}\n",
        "structuredPatch": [
            {
                "oldStart": 42,
                "oldLines": 6,
                "newStart": 42,
                "newLines": 8,
                "lines": [
                    " ",
                    "     protected function view(string $name, array $data = []): void",
                    "     {",
                    "+        $data['csrfField'] = $this->csrfField();",
                    "+        $data['csrfToken'] = $this->csrfToken();",
                    "         extract($data);",
                    "         $file = VIEW_PATH . '\/' . str_replace('.', '\/', $name) . '.php';",
                    " "
                ]
            }
        ],
        "userModified": false,
        "replaceAll": false
    }
}