up

api/get_media.php

@@ -18,9 +18,15 @@ if (!$isGet || $wantsJson) {
 header('Content-Type: application/json; charset=utf-8');
 
 $mediaId = $_GET['id'] ?? ($_POST['id'] ?? null);
-if (!$mediaId) {
+
+// Validar que mediaId no esté vacío y sea válido
+if (empty($mediaId) || !is_string($mediaId) || trim($mediaId) === '') {
+    error_log("get_media.php: mediaId inválido o vacío recibido: " . var_export($mediaId, true));
     http_response_code(400);
-    echo json_encode(['error' => 'media id requerido']);
+    echo json_encode([
+        'error' => 'Invalid media ID',
+        'hint' => 'Media ID cannot be empty or invalid'
+    ]);
     exit;
 }
 

api/version/media-url.php

@@ -176,6 +176,20 @@ if ($providedUrl) {
 } else {
     $token = getConfigFromDB('whatsapp_token', '');
     $apiUrl = rtrim(getConfigFromDB('whatsapp_api_url', 'https://graph.facebook.com/v22.0/'), '/');
+    
+    // Validar que mediaId no esté vacío antes de construir el endpoint
+    if (empty($mediaId) || !is_string($mediaId) || trim($mediaId) === '') {
+        media_log("Invalid or empty mediaId provided: " . var_export($mediaId, true));
+        http_response_code(400);
+        header('Content-Type: application/json; charset=utf-8');
+        echo json_encode([
+            'success' => false,
+            'error' => 'Invalid media ID',
+            'hint' => 'Media ID cannot be empty or invalid'
+        ]);
+        exit;
+    }
+    
     $endpoint = "{$apiUrl}/{$mediaId}";
 
     if (empty($token)) {