Changeset 3799773 for gatecraft/trunk/includes/helpers.php

Timestamp:

11/13/2026 06:38:04 AM (40 hours ago)

Author:

gatecraftjp

Message:

2026.1.3.12: security and reliability improvements

File:

• gatecraft/trunk/includes/helpers.php (modified) (1 diff)

gatecraft/trunk/includes/helpers.php

@@ -687 +687 @@
 }
 
+/**
+ * Unlisted events are reached only by their address, so the address must not be guessable from the title.
+ * event_private_slug() ends it with 12 random hex characters (48 bits); event_slug_base() removes that part again,
+ * so a copy of an unlisted event never carries the original's private part.
+ */
+function event_slug_base(string $slug): string
+{
+    return (string)preg_replace('/-[a-f0-9]{12}$/', '', $slug);
+}
+
+function event_private_slug(string $slug): string
+{
+    if (preg_match('/-[a-f0-9]{12}$/', $slug)) return $slug;
+    return rtrim(substr($slug, 0, 100), '-') . '-' . bin2hex(random_bytes(6));
+}
+
 /** Crockford base32 (no I, L, O, U): readable, unambiguous codes. */
 function random_code(int $len): string