HTTP call to http://YOUR_GITBUCKET/database/backup should be POST only

[aadrian]

The HTTP call to http://YOUR_GITBUCKET/database/backup to create the backup should be POST only, not GET since the remote system is "changing".

Also it should really be secured for admins only, e.g. at least with a Token, so that it can be used with curl or wget.

Thank you.

[c0llab0rat0r]

Each of these issues should be resolved now (using POST, requiring admin, and using api tokens as credentials).

[aadrian]

@c0llab0rat0r This looks great, and also the detailed test suite too! Thank you.

[takezoe]

It's already released. Can we close this?

[stevemesser]

I just update to the latest version of the H2 Backup plugin.

How can I redirect from with the plugin page to save the backup to /media/usb/backups in stead of the default location?

[stevemesser]

Never mind, I just tried a relative path and it worked fine, I could have sworn I tried that and that it didn't work.