From 81eb75355618969ec1463f952dd94de3359e9fd2 Mon Sep 17 00:00:00 2001
From: Andreas <the.hion.v@gmail.com>
Date: Tue, 17 Sep 2019 15:59:28 +0200
Subject: [PATCH] fixes

---
 dev_mvc/model/testactions/model_createdb.php   | 2 +-
 dev_mvc/model/testactions/model_populatedb.php | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/dev_mvc/model/testactions/model_createdb.php b/dev_mvc/model/testactions/model_createdb.php
index 73b1300..c0a71d0 100644
--- a/dev_mvc/model/testactions/model_createdb.php
+++ b/dev_mvc/model/testactions/model_createdb.php
@@ -4,7 +4,7 @@ if(isset($_POST['auth'])){
         createDB();
     }
 }else{
-    echo('test');
+    echol('you have no authorization to do that');
 }
 
 function createDB(){
diff --git a/dev_mvc/model/testactions/model_populatedb.php b/dev_mvc/model/testactions/model_populatedb.php
index b7b3483..1891032 100644
--- a/dev_mvc/model/testactions/model_populatedb.php
+++ b/dev_mvc/model/testactions/model_populatedb.php
@@ -1,4 +1,12 @@
 <?php
+if(isset($_POST['auth'])){
+    if($_POST['auth'] == getenv('ADMIN_ACTION_KEY')){
+        populateDB();
+    }
+}else{
+    echol('you have no authorization to do that');
+}
+
 function populateDB(){
     try{
         if(getenv("SQL_CREDENTIALS") !== false){