/* Check classic admin password authentification. */
if (isset ($_POST['admin_password']) && empty($cfg['admin_http_auth_user']))
{
- if (strcmp ($cfg['admin_password'], $_POST['admin_password']) == 0)
+ if ($cfg['admin_password'] === $_POST['admin_password'])
$_SESSION['admin_auth'] = true;
else
{
/* Remove errors. */
@error_reporting(0);
-/* Admin interface. */
-require (JIRAFEAU_ROOT . 'lib/template/header.php');
-?><h2><?php echo t('Admin interface'); ?></h2><?php
-
-/* Show admin interface. */
+/* Show admin interface if not downloading a file. */
+if (!(isset ($_POST['action']) && strcmp ($_POST['action'], 'download') == 0))
{
- ?><div id = "install">
+ require (JIRAFEAU_ROOT . 'lib/template/header.php');
+ ?><h2><?php echo t('Admin interface'); ?></h2><?php
+ ?><h2>(version <?php echo JIRAFEAU_VERSION ?>)</h2><?php
+
+ ?><div id = "admin">
<fieldset><legend><?php echo t('Actions');?></legend>
<table>
<form action = "<?php echo basename(__FILE__); ?>" method = "post">
<tr>
<input type = "hidden" name = "action" value = "clean_async"/>
<td class = "info">
- <?php echo t('Clean old unfinished transferts'); ?>
+ <?php echo t('Clean old unfinished transfers'); ?>
</td>
<td></td>
<td>
</form>
</table>
<form action = "<?php echo basename(__FILE__); ?>" method = "post">
- <input type = "hidden" name = "action" value = "logout"/>
- <input type = "submit" value = "<?php echo t('Logout'); ?>" />
+ <input type = "hidden" name = "action" value = "logout" />
+ <input type = "submit" value = "<?php echo t('Logout'); ?>" />
</form>
</fieldset></div><?php
}
$l['file_name'] . '"');
if (file_exists(VAR_FILES . $p . $l['md5']))
readfile (VAR_FILES . $p . $l['md5']);
+ exit;
}
}