[TASK] Remove plaintext password support

[jirafeau_project.git] / index.php

diff --git a/index.php b/index.php
index d03ee81453dc8cd1062f3b0e565f414fc04ec758..e860012d42601d6bb90e385db882ede171524ea6 100644 (file)
--- a/index.php
+++ b/index.php
@@ -35,8 +35,11 @@ if (has_error()) {
 require(JIRAFEAU_ROOT . 'lib/template/header.php');
 
 /* Check if user is allowed to upload. */
-// First check: Challenge by IP
-if (true === jirafeau_challenge_upload_ip($cfg['upload_ip'], get_ip_address($cfg))) {
+// First check: Challenge by IP NO PASSWORD
+if (true === jirafeau_challenge_upload_ip($cfg['upload_ip_nopassword'], get_ip_address($cfg))) {
+}
+// Second check: Challenge by IP
+elseif (true === jirafeau_challenge_upload_ip($cfg['upload_ip'], get_ip_address($cfg))) {
     // Is an upload password required?
     if (jirafeau_has_upload_password($cfg)) {
         // Logout action
@@ -101,7 +104,7 @@ else {
         <a id="upload_link_email" href=""><img id="upload_image_email"/></a>
     </p><p>
         <code id=upload_link_text></code>
-        <button id="upload_link_button">â\9c\82</button>
+        <button id="upload_link_button">â\8e\98</button>
     </p>
     </div>
 
@@ -112,7 +115,7 @@ else {
         <a id="preview_link" href=""><?php echo t('VIEW_LINK') ?></a>
     </p><p>
         <code id=preview_link_text></code>
-        <button id="preview_link_button">â\9c\82</button>
+        <button id="preview_link_button">â\8e\98</button>
     </p>
     </div>
     <?php
@@ -123,7 +126,7 @@ else {
         <a id="direct_link" href=""><?php echo t('DIRECT_DL') ?></a>
     </p><p>
         <code id=direct_link_text></code>
-        <button id="direct_link_button">â\9c\82</button>
+        <button id="direct_link_button">â\8e\98</button>
     </p>
     </div>
 
@@ -132,7 +135,7 @@ else {
         <a id="delete_link" href=""><?php echo t('DELETE_LINK') ?></a>
     </p><p>
         <code id=delete_link_text></code>
-        <button id="delete_link_button">â\9c\82</button>
+        <button id="delete_link_button">â\8e\98</button>
     </p>
     </div>
 
@@ -256,7 +259,8 @@ else {
     </div> </fieldset>
 
     <?php
-    if (jirafeau_has_upload_password($cfg)) {
+    if (jirafeau_has_upload_password($cfg)
+        && false === jirafeau_challenge_upload_ip($cfg['upload_ip_nopassword'], get_ip_address($cfg))) {
         ?>
     <form method="post" class="form logout">
         <input type = "hidden" name = "action" value = "logout"/>