X-Git-Url: https://git.p6c8.net/jirafeau.git/blobdiff_plain/507c6d855f2a15a6d5509b27517ee60732006a3c..31ff867136044d3f3fbeb4357f814adb8da3003a:/admin.php

diff --git a/admin.php b/admin.php
index 6560f10..44a0134 100644
--- a/admin.php
+++ b/admin.php
@@ -65,8 +65,7 @@ if (php_sapi_name() == "cli") {
       }
       /* Test web password authentification. */
       else if (!empty($cfg['admin_password']) && isset($_POST['admin_password'])) {
-          if ($cfg['admin_password'] === $_POST['admin_password'] ||
-              $cfg['admin_password'] === hash('sha256', $_POST['admin_password'])) {
+          if ($cfg['admin_password'] === hash('sha256', $_POST['admin_password'])) {
               jirafeau_admin_session_start();
           } else {
               require(JIRAFEAU_ROOT . 'lib/template/header.php');
@@ -242,7 +241,7 @@ if (php_sapi_name() == "cli") {
           echo '<div class="message">' . NL;
           echo '<p>' . t('LINK_DELETED') . '</p></div>';
       } elseif (strcmp($_POST['action'], 'delete_file') == 0) {
-          $count = jirafeau_delete_file($_POST['md5']);
+          $count = jirafeau_delete_file($_POST['hash']);
           echo '<div class="message">' . NL;
           echo '<p>' . t('DELETED_LINKS') . ' : ' . $count . '</p></div>';
       } elseif (strcmp($_POST['action'], 'download') == 0) {
@@ -250,13 +249,18 @@ if (php_sapi_name() == "cli") {
           if (!count($l)) {
               return;
           }
-          $p = s2p($l['md5']);
+          $p = s2p($l['hash']);
           header('Content-Length: ' . $l['file_size']);
           header('Content-Type: ' . $l['mime_type']);
           header('Content-Disposition: attachment; filename="' .
                   $l['file_name'] . '"');
-          if (file_exists(VAR_FILES . $p . $l['md5'])) {
-              readfile(VAR_FILES . $p . $l['md5']);
+          if (file_exists(VAR_FILES . $p . $l['hash'])) {
+              $r = fopen(VAR_FILES . $p . $l['hash'], 'r');
+              while (!feof($r)) {
+                  print fread($r, 1024);
+                  ob_flush();
+              }
+              fclose($r);
           }
           exit;
       }