From 73baba9d1dac34ebc4dcd9d14d6002bf52e87e41 Mon Sep 17 00:00:00 2001
From: SubleXBle <51033045+SubleXBle@users.noreply.github.com>
Date: Sat, 16 Aug 2025 20:27:10 +0200
Subject: [PATCH] Create get-json.php

---
 Web-UI/includes/get-json.php | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 Web-UI/includes/get-json.php

diff --git a/Web-UI/includes/get-json.php b/Web-UI/includes/get-json.php
new file mode 100644
index 0000000..a8f9a59
--- /dev/null
+++ b/Web-UI/includes/get-json.php
@@ -0,0 +1,21 @@
+<?php
+// includes/get-json.php
+require_once __DIR__ . '/paths.php';
+
+$filename = basename($_GET['file'] ?? '');
+$filepath = $PATHS["fail2ban"] . '/' . $filename;
+
+// secure: it can only read json from archive
+if (
+    !$filename ||
+    !preg_match('/^fail2ban-events-\d{8}\.json$/', $filename) ||
+    strpos(realpath($filepath), realpath($PATHS["fail2ban"])) !== 0 ||
+    !file_exists($filepath)
+) {
+    http_response_code(404);
+    exit('Not found');
+}
+
+// deliver header and json
+header('Content-Type: application/json');
+readfile($filepath);