From 5bbd06c397aa019d2f0faea190bf1ba3286ace97 Mon Sep 17 00:00:00 2001
From: dqos <8611981+dqos@users.noreply.github.com>
Date: Mon, 17 Jan 2022 13:12:35 +0100
Subject: [PATCH] Added backend validation

---
 backend.php | 3 ++-
 index.php   | 4 ++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/backend.php b/backend.php
index 5147bcc..9c149ec 100644
--- a/backend.php
+++ b/backend.php
@@ -21,7 +21,8 @@ use Hybula\LookingGlass;
 LookingGlass::validateConfig();
 LookingGlass::startSession();
 
-if ($_SESSION['TARGET'] && $_SESSION['METHOD']) {
+if ($_SESSION['TARGET'] && $_SESSION['METHOD'] && isset($_SESSION['BACKEND'])) {
+    unset($_SESSION['BACKEND']);
     switch ($_SESSION['METHOD']) {
         case 'ping':
             LookingGlass::ping($_SESSION['TARGET']);
diff --git a/index.php b/index.php
index 9fb515b..c75b4cd 100644
--- a/index.php
+++ b/index.php
@@ -61,7 +61,7 @@ if (!empty($_POST)) {
                 }
             }
             $_SESSION['TERMS'] = true;
-            $callBackend = true;
+            $_SESSION['BACKEND'] = true;
             break;
         }
         $errorMessage = 'Unsupported POST received.';
@@ -265,7 +265,7 @@ if (LG_BLOCK_CUSTOM) {
 </div>
 
 <script type="text/javascript">
-    <?php if (isset($callBackend)) { echo 'callBackend();'; } ?>
+    <?php if (isset($_SESSION['BACKEND'])) { echo 'callBackend();'; } ?>
     function callBackend() {
         const executeButton = document.getElementById('executeButton');
         executeButton.innerText = 'Executing...';