[TASK] rework user auth

[jirafeau_mojo42.git] / f.php

diff --git a/f.php b/f.php
index e2547d7d36f19324089434fb10303890362a66a2..5555523f708cfcb18607069e32b0ccfca9c92199 100644 (file)
--- a/f.php
+++ b/f.php
@@ -89,8 +89,8 @@ if (!empty($delete_code) && $delete_code == $link['link_code']) {
             '</p></div>';
     } else { ?>
         <div>
             '</p></div>';
     } else { ?>
         <div>

-        <form action="f.php" method="post" id="submit_delete_post" class="form login">
-        <input type="hidden" name="do_delete" value=1/>
+        <form action="<?php echo 'f.php?h=' . $link_name . '&amp;d=' . $delete_code; ?>" method="post" id="submit_delete_post" class="form login">
+        <input type="hidden" name="do_delete" value="1" />

         <fieldset>
              <legend> <?php echo t('CONFIRM_DEL') ?> </legend>
              <table>
         <fieldset>
              <legend> <?php echo t('CONFIRM_DEL') ?> </legend>
              <table>


@@ -101,9 +101,7 @@ if (!empty($delete_code) && $delete_code == $link['link_code']) {
                 <?php echo t('USING_SERVICE'). ' <a href="tos.php" target="_blank" rel="noopener noreferrer">' . t('TOS') . '</a>.' ?>
              </td></tr>
              <tr><td>
                 <?php echo t('USING_SERVICE'). ' <a href="tos.php" target="_blank" rel="noopener noreferrer">' . t('TOS') . '</a>.' ?>
              </td></tr>
              <tr><td>

-                <input type="submit" id="submit_delete"  value="<?php echo t('DELETE'); ?>"
-                onclick="document.getElementById('submit_delete_post').action='<?php echo 'f.php?h=' . $link_name . '&amp;d=' . $delete_code . "';"; ?>
-                document.getElementById('submit_delete').submit ();"/>
+                <input type="submit" id="submit_delete" value="<?php echo t('DELETE'); ?>"/>

              </td></tr>
              </table>
          </fieldset></form></div><?php
              </td></tr>
              </table>
          </fieldset></form></div><?php


@@ -272,11 +270,16 @@ elseif ($link['crypted']) {
 }
 /* Read file. */
 else {
 }
 /* Read file. */
 else {

-    $r = fopen(VAR_FILES . $p . $link['hash'], 'r');
-    while (!feof($r)) {
-        print fread($r, 1024);
+    if ($cfg['use_xsendfile']) {
+        $file_web_path = preg_replace('#^' . $_SERVER['DOCUMENT_ROOT'] . '#', '', VAR_FILES);
+        header('X-Sendfile: ' . $file_web_path . $p . $link['hash']);
+    } else {
+        $r = fopen(VAR_FILES . $p . $link['hash'], 'r');
+        while (!feof($r)) {
+            print fread($r, 1024);
+        }
+        fclose($r);

     }
     }

-    fclose($r);

 }
 
 if ($link['onetime'] == 'O') {
 }
 
 if ($link['onetime'] == 'O') {