jaredandClaude Opus 4.8
d6214a0339
Lint / PHP (phpcs PSR-12) (push) Successful in 26s
Lint / JS (eslint) (push) Successful in 12s
Lint / PHP requirements (version + extensions) (push) Successful in 21s
Security / PHP Security (semgrep) (push) Successful in 1m11s
Lint / Deploy (push) Successful in 2s
Lint / Notify on failure (push) Has been skipped
Lint / PHP (phpcs PSR-12) (pull_request) Successful in 47s
Lint / JS (eslint) (pull_request) Successful in 12s
Lint / PHP requirements (version + extensions) (pull_request) Successful in 59s
Security / PHP Security (semgrep) (pull_request) Successful in 1m6s
Lint / Deploy (pull_request) Has been skipped
Lint / Notify on failure (pull_request) Has been skipped
- migrations/000_baseline.sql: full schema baseline captured from prod (validated on a throwaway DB: 17 tables/17 FKs), so the schema is reproducible for fresh installs / disaster recovery - create_recurring_tickets cron: send the Matrix ticket-created notification and invalidate the stats cache like the other create paths - create_ticket_api.php + TicketController::create: invalidate the stats cache on create/escalate/reopen so dashboard counts aren't stale - scripts/cleanup_orphan_uploads.php: restored, made safe (24h mtime grace, 9-digit-dir only, skips avatars/symlinks, matches the unique filename column, --dry-run) - cron/cleanup_audit_log.php: enforce the configured audit-log retention (deleteOldLogs was implemented but never called) - README: correct CSRF-rotation, hwmon dedup (no 24h window), SLA (no P3), stats-cache callers, and the project structure/endpoint listing - .env.example: document TRUSTED_PROXIES fail-open risk and .env quoting Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
51 lines
1.2 KiB
PHP
51 lines
1.2 KiB
PHP
#!/usr/bin/env php
|
|
<?php
|
|
|
|
/**
|
|
* Audit Log Retention Cron Job
|
|
*
|
|
* Deletes audit_log rows older than AUDIT_LOG_RETENTION_DAYS (config, default 90).
|
|
* Recommended: run once daily.
|
|
*
|
|
* Example crontab entry (03:30 every day):
|
|
* 30 3 * * * /usr/bin/php /path/to/cron/cleanup_audit_log.php >> /var/log/audit_log_cleanup.log 2>&1
|
|
*/
|
|
|
|
// Prevent web access
|
|
if (php_sapi_name() !== 'cli') {
|
|
http_response_code(403);
|
|
exit('CLI access only');
|
|
}
|
|
|
|
// Change to project root directory
|
|
chdir(dirname(__DIR__));
|
|
|
|
// Include required files
|
|
require_once 'config/config.php';
|
|
require_once 'helpers/Database.php';
|
|
require_once 'models/AuditLogModel.php';
|
|
|
|
// Log function
|
|
function logMessage($message)
|
|
{
|
|
echo '[' . date('Y-m-d H:i:s') . '] ' . $message . "\n";
|
|
}
|
|
|
|
$retentionDays = (int)($GLOBALS['config']['AUDIT_LOG_RETENTION_DAYS'] ?? 90);
|
|
|
|
logMessage("Starting audit log cleanup (retention: {$retentionDays} days)");
|
|
|
|
try {
|
|
$conn = Database::getConnection();
|
|
|
|
$auditLog = new AuditLogModel($conn);
|
|
$deleted = $auditLog->deleteOldLogs($retentionDays);
|
|
|
|
logMessage("Removed {$deleted} audit log row(s) older than {$retentionDays} days");
|
|
|
|
Database::close();
|
|
} catch (Exception $e) {
|
|
logMessage('FATAL ERROR: ' . $e->getMessage());
|
|
exit(1);
|
|
}
|