dodanie csrf, oauth 2, dockerfile

source/ajax_action.php

@@ -10,6 +10,11 @@ if (!$data || empty($data['action']) || empty($data['id'])) {
     die(json_encode(['success' => false, 'error' => 'Brak danych']));
 }
 
+if (!isValidCsrfToken($data['csrf_token'] ?? null)) {
+    http_response_code(403);
+    die(json_encode(['success' => false, 'error' => 'Nieprawidlowy token bezpieczenstwa']));
+}
+
 $id = (int)$data['id'];
 $action = $data['action'];
 
@@ -61,6 +66,7 @@ try {
         echo json_encode(['success' => false, 'error' => 'Nieznana akcja']);
     }
 } catch (PDOException $e) {
-    echo json_encode(['success' => false, 'error' => $e->getMessage()]);
+    error_log($e->getMessage());
+    echo json_encode(['success' => false, 'error' => 'Wystapil blad serwera']);
 }
 ?>