X-Git-Url: https://git.p6c8.net/jirafeau.git/blobdiff_plain/a6c1ba9e0d7305fc75eb216d1646d5a59d044986..93711b16110928de8c696e76575f1004f2341441:/index.php diff --git a/index.php b/index.php index 127d9e6..dade552 100644 --- a/index.php +++ b/index.php @@ -35,19 +35,22 @@ if (has_error ()) } /* Ask password if upload password is set. */ -if (strlen ($cfg['upload_password']) > 0) +if (jirafeau_has_upload_password ($cfg)) { session_start(); /* Unlog if asked. */ if (isset ($_POST['action']) && (strcmp ($_POST['action'], 'logout') == 0)) - $_SESSION['upload_auth'] = false; + session_unset (); /* Auth. */ if (isset ($_POST['upload_password'])) { - if (strcmp ($cfg['upload_password'], $_POST['upload_password']) == 0) + if (jirafeau_challenge_upload_password ($cfg, $_POST['upload_password'])) + { $_SESSION['upload_auth'] = true; + $_SESSION['user_upload_password'] = $_POST['upload_password']; + } else { $_SESSION['admin_auth'] = false; @@ -91,18 +94,38 @@ if (strlen ($cfg['upload_password']) > 0) ?>