- Login: replace fragile unique_id/email check with proper HTTP 200 trust + explicit meta.rc=error detection (matches Art-of-WiFi reference impl) - Login: add TOKEN cookie fallback for CSRF token extraction in case the X-CSRF-Token response header is absent (some firmware versions) - getVouchers(): pass explicit 'GET' method instead of relying on cURL default - apiRequest(): use CURLOPT_HTTPGET for GET requests; send CURLOPT_POSTFIELDS as empty object for POST with no data; CSRF header only on non-GET requests - Remove array_filter() header construction, replace with clean conditional append https://claude.ai/code/session_01UsuvFAmmeagtQa14QA4iaq |
||
|---|---|---|
| .. | ||
| Auth.php | ||
| Database.php | ||
| Mailer.php | ||
| UniFiController.php | ||