-
+
days
@@ -282,7 +282,7 @@ $currentFilters = $filters ?? ['search' => '', 'status' => '', 'registrar' => ''
- Expires: ( days)
+ Expires: ( days)
diff --git a/core/Auth.php b/core/Auth.php
index bb8ef20..4d35fcb 100644
--- a/core/Auth.php
+++ b/core/Auth.php
@@ -41,8 +41,15 @@ class Auth
*/
public static function require(): void
{
- // Get current path
- $currentPath = parse_url($_SERVER['REQUEST_URI'] ?? '/', PHP_URL_PATH);
+ // Get current path - handle malformed URIs gracefully
+ $requestUri = $_SERVER['REQUEST_URI'] ?? '/';
+ $currentPath = parse_url($requestUri, PHP_URL_PATH);
+
+ // If parse_url fails (malformed URI), treat as root path
+ // This prevents null from being passed to strpos()
+ if ($currentPath === null || $currentPath === false) {
+ $currentPath = '/';
+ }
// Public paths that don't require authentication
$publicPaths = [
diff --git a/cron/check_domains.php b/cron/check_domains.php
index c373fcc..d4aca5c 100644
--- a/cron/check_domains.php
+++ b/cron/check_domains.php
@@ -115,12 +115,16 @@ foreach ($domains as $domain) {
continue;
}
+ // IMPORTANT: Use WHOIS expiration date if available, otherwise preserve existing expiration date
+ // This handles TLDs like .nl that don't provide expiration dates via RDAP
+ $expirationDate = $whoisData['expiration_date'] ?? $domain['expiration_date'];
+
// Update domain information
- $status = $whoisService->getDomainStatus($whoisData['expiration_date'], $whoisData['status'] ?? []);
+ $status = $whoisService->getDomainStatus($expirationDate, $whoisData['status'] ?? [], $whoisData);
$domainModel->update($domain['id'], [
'registrar' => $whoisData['registrar'],
'registrar_url' => $whoisData['registrar_url'] ?? null,
- 'expiration_date' => $whoisData['expiration_date'],
+ 'expiration_date' => $expirationDate,
'updated_date' => $whoisData['updated_date'] ?? null,
'abuse_email' => $whoisData['abuse_email'] ?? null,
'last_checked' => date('Y-m-d H:i:s'),
diff --git a/database/migrations/000_initial_schema_v1.1.0.sql b/database/migrations/000_initial_schema_v1.1.0.sql
index b4966d3..9636e73 100644
--- a/database/migrations/000_initial_schema_v1.1.0.sql
+++ b/database/migrations/000_initial_schema_v1.1.0.sql
@@ -225,7 +225,7 @@ ON DUPLICATE KEY UPDATE color = VALUES(color), description = VALUES(description)
CREATE TABLE IF NOT EXISTS notification_channels (
id INT AUTO_INCREMENT PRIMARY KEY,
notification_group_id INT NOT NULL,
- channel_type ENUM('email', 'telegram', 'discord', 'slack', 'mattermost', 'webhook') NOT NULL,
+ channel_type ENUM('email', 'telegram', 'discord', 'slack', 'mattermost', 'webhook', 'pushover') NOT NULL,
channel_config JSON NOT NULL,
is_active BOOLEAN DEFAULT TRUE,
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
@@ -362,7 +362,7 @@ INSERT INTO settings (setting_key, setting_value, `type`, `description`) VALUES
('app_name', 'Domain Monitor', 'string', 'Application name'),
('app_url', 'http://localhost:8000', 'string', 'Application URL'),
('app_timezone', 'UTC', 'string', 'Application timezone'),
-('app_version', '1.1.0', 'string', 'Application version number'),
+('app_version', '1.1.1', 'string', 'Application version number'),
-- Email settings
('mail_host', 'smtp.mailtrap.io', 'string', 'SMTP server host'),
diff --git a/database/migrations/022_add_pushover_channel_type.sql b/database/migrations/022_add_pushover_channel_type.sql
new file mode 100644
index 0000000..901b7b2
--- /dev/null
+++ b/database/migrations/022_add_pushover_channel_type.sql
@@ -0,0 +1,6 @@
+-- Add 'pushover' to the channel_type ENUM in notification_channels table
+-- This enables Pushover push notification support for domain expiration alerts
+
+ALTER TABLE notification_channels
+MODIFY COLUMN channel_type ENUM('email', 'telegram', 'discord', 'slack', 'mattermost', 'webhook', 'pushover') NOT NULL;
+
diff --git a/database/migrations/023_update_app_version_to_1.1.1.sql b/database/migrations/023_update_app_version_to_1.1.1.sql
new file mode 100644
index 0000000..634665c
--- /dev/null
+++ b/database/migrations/023_update_app_version_to_1.1.1.sql
@@ -0,0 +1,7 @@
+-- Update application version to 1.1.1
+-- This version includes Pushover notifications, security fixes, and improved domain status detection
+
+UPDATE settings
+SET setting_value = '1.1.1'
+WHERE setting_key = 'app_version';
+
diff --git a/database/migrations/README.md b/database/migrations/README.md
index c57db4d..80e6a57 100644
--- a/database/migrations/README.md
+++ b/database/migrations/README.md
@@ -28,6 +28,13 @@ If upgrading from v1.0.0, these incremental migrations will be applied:
- `014_add_captcha_settings.sql` - CAPTCHA settings (v2, v3, Turnstile)
- `015_create_error_logs_table.sql` - Error logging and debugging system
- `016_add_tags_to_domains.sql` - Domain tags for organization
+- `017_add_two_factor_authentication.sql` - Two-factor authentication (TOTP)
+- `018_add_user_isolation.sql` - User isolation mode settings
+- `019_add_webhook_channel_type.sql` - Webhook and Mattermost channel support
+- `020_create_tags_system.sql` - Advanced tagging system for domains
+- `021_add_avatar_field.sql` - User avatar field
+- `022_add_pushover_channel_type.sql` - Pushover notification channel support
+- `023_update_app_version_to_1.1.1.sql` - Update version to 1.1.1
**Upgrade via:** Web updater at `/install/update`
diff --git a/public/index.php b/public/index.php
index 819ca54..26b639b 100644
--- a/public/index.php
+++ b/public/index.php
@@ -12,6 +12,41 @@ define('PATH_ROOT', __DIR__ . '/../');
// Register global error handlers FIRST (before anything else can fail)
ErrorHandler::register();
+// === EARLY REQUEST VALIDATION ===
+// Block malformed requests before they cause issues
+// This prevents null pointer errors and logs suspicious activity
+$requestUri = $_SERVER['REQUEST_URI'] ?? '/';
+
+// Validate REQUEST_URI format - reject if parse_url fails
+$parsedPath = parse_url($requestUri, PHP_URL_PATH);
+if ($parsedPath === null || $parsedPath === false) {
+ // Log the suspicious request
+ $logger = new \App\Services\Logger();
+ $logger->warning('Malformed REQUEST_URI blocked', [
+ 'uri' => $requestUri,
+ 'ip' => $_SERVER['REMOTE_ADDR'] ?? 'unknown',
+ 'user_agent' => $_SERVER['HTTP_USER_AGENT'] ?? 'unknown'
+ ]);
+
+ // Return 400 Bad Request
+ http_response_code(400);
+ header('Content-Type: text/plain');
+ die('Bad Request: Invalid URI format');
+}
+
+// Additional validation: REQUEST_URI should start with /
+if (!empty($requestUri) && $requestUri[0] !== '/') {
+ $logger = new \App\Services\Logger();
+ $logger->warning('Invalid REQUEST_URI - must start with /', [
+ 'uri' => $requestUri,
+ 'ip' => $_SERVER['REMOTE_ADDR'] ?? 'unknown'
+ ]);
+
+ http_response_code(400);
+ header('Content-Type: text/plain');
+ die('Bad Request: Invalid URI format');
+}
+
// Load environment variables (using safeLoad to not throw if missing)
$dotenv = Dotenv::createImmutable(__DIR__ . '/..');
try {
@@ -40,7 +75,8 @@ Core\SessionConfig::start();
require_once __DIR__ . '/../app/Helpers/CsrfHelper.php';
// Check if system is installed (using flag file - no DB queries!)
-$currentPath = parse_url($_SERVER['REQUEST_URI'] ?? '/', PHP_URL_PATH);
+// Note: REQUEST_URI has already been validated above, so parse_url won't return null
+$currentPath = parse_url($_SERVER['REQUEST_URI'] ?? '/', PHP_URL_PATH) ?? '/';
$isInstallerPath = strpos($currentPath, '/install') === 0;
$installedFlagFile = __DIR__ . '/../.installed';