require(JIRAFEAU_ROOT . 'lib/lang.php');
if ($cfg['download_password_requirement'] === "generated"){
- $download_pass = jirafeau_gen_download_pass();
+ $download_pass = jirafeau_gen_download_pass($cfg['download_password_gen_len'], $cfg['download_password_gen_chars']);
}
check_errors($cfg);
// Second check: Challenge by IP NO PASSWORD
elseif (true === jirafeau_challenge_upload_ip_without_password($cfg, get_ip_address($cfg))) {
jirafeau_user_session_start();
+ $_SESSION['user_auth_type'] = JIRAFEAU_USER_AUTH_BY_IP_NO_PASSWORD;
}
// Third check: Challenge by IP
elseif (true === jirafeau_challenge_upload_ip($cfg, get_ip_address($cfg))) {
if (isset($_POST['upload_password'])) {
if (jirafeau_challenge_upload_password($cfg, $_POST['upload_password'])) {
jirafeau_user_session_start();
+ $_SESSION['user_auth_type'] = JIRAFEAU_USER_AUTH_BY_PASSWORD;
} else {
jirafeau_session_end();
jirafeau_fatal_error(t('BAD_PSW'), $cfg);
</div> </fieldset></form>
<?php
- if (jirafeau_user_session_logged()) {
+ if (jirafeau_user_session_logged() && $_SESSION['user_auth_type'] == JIRAFEAU_USER_AUTH_BY_PASSWORD) {
?>
<form method="post" class="form logout">
<input type = "hidden" name = "action" value = "logout"/>