require(JIRAFEAU_ROOT . 'lib/functions.php');
require(JIRAFEAU_ROOT . 'lib/lang.php');
-if ($cfg['download_password_requirement'] === "generated"){
- $download_pass = jirafeau_gen_download_pass();
+if ($cfg['download_password_requirement'] === "generated") {
+ $download_pass = jirafeau_gen_download_pass($cfg['download_password_gen_len'], $cfg['download_password_gen_chars']);
}
check_errors($cfg);
// Second check: Challenge by IP NO PASSWORD
elseif (true === jirafeau_challenge_upload_ip_without_password($cfg, get_ip_address($cfg))) {
jirafeau_user_session_start();
+ $_SESSION['user_auth_type'] = JIRAFEAU_USER_AUTH_BY_IP_NO_PASSWORD;
}
// Third check: Challenge by IP
elseif (true === jirafeau_challenge_upload_ip($cfg, get_ip_address($cfg))) {
if (isset($_POST['upload_password'])) {
if (jirafeau_challenge_upload_password($cfg, $_POST['upload_password'])) {
jirafeau_user_session_start();
+ $_SESSION['user_auth_type'] = JIRAFEAU_USER_AUTH_BY_PASSWORD;
} else {
jirafeau_session_end();
jirafeau_fatal_error(t('BAD_PSW'), $cfg);
</p>
</div>
- <?php if ($cfg['download_password_requirement'] === "generated"){
- ?>
+ <?php if ($cfg['download_password_requirement'] === "generated") {
+ ?>
<div id="show_password">
<p><?php echo t('PSW') ?></p>
</div>
<div id="upload">
-<fieldset>
+<form id="upload-form" onsubmit="
+ event.preventDefault();
+ document.getElementById('upload').style.display = 'none';
+ document.getElementById('uploading').style.display = '';
+ upload (<?php echo jirafeau_get_max_upload_chunk_size_bytes($cfg['max_upload_chunk_size_bytes']); ?>);
+ "><fieldset>
<legend>
<?php echo t('SEL_FILE'); ?>
</legend>
echo '<tr><td>' . t('ONE_TIME_DL') . ':</td>';
echo '<td><input type="checkbox" id="one_time_download" /></td></tr>';
}
- if ($cfg['download_password_requirement'] === 'generated'){
+ if ($cfg['download_password_requirement'] === 'generated') {
echo '<input type="hidden" name="key" id="input_key" value="' . $download_pass .'"/>';
- }else{
+ } else {
echo '<tr><td><label for="input_key">' . t('PSW') . ':' . '</label></td>';
echo '<td><input type="password" name="key" id="input_key" autocomplete = "new-password"';
- if ($cfg['download_password_policy'] === 'regex'){
+ if ($cfg['download_password_policy'] === 'regex') {
echo ' pattern="' . substr($cfg['download_password_policy_regex'], 1, strlen($cfg['download_password_policy_regex']) - 2) . '"'; //remove php delimiters
}
- if ($cfg['download_password_requirement'] === 'required'){
+ if ($cfg['download_password_requirement'] === 'required') {
echo ' required';
}
echo '/></td></tr>';
<p id="max_file_size" class="config"></p>
<p>
- <input type="submit" id="send" value="<?php echo t('SEND'); ?>"
- onclick="
- document.getElementById('upload').style.display = 'none';
- document.getElementById('uploading').style.display = '';
- upload (<?php echo jirafeau_get_max_upload_chunk_size_bytes($cfg['max_upload_chunk_size_bytes']); ?>);
- "/>
+ <input type="submit" id="send" value="<?php echo t('SEND'); ?>"/>
</p>
</table>
- </div> </fieldset>
+ </div> </fieldset></form>
<?php
- if (jirafeau_user_session_logged()) {
+ if (jirafeau_user_session_logged() && $_SESSION['user_auth_type'] == JIRAFEAU_USER_AUTH_BY_PASSWORD) {
?>
<form method="post" class="form logout">
<input type = "hidden" name = "action" value = "logout"/>