diff options
| author | Cassio de Campos <cassiopc@gmail.com> | 2017-07-30 17:40:13 +0000 |
|---|---|---|
| committer | Cassio de Campos <cassiopc@gmail.com> | 2017-07-30 17:40:13 +0000 |
| commit | e3ac3a916759fcd52d316e79b4c969b7e01b1b68 (patch) | |
| tree | c5124d244de1157763979383e1ef8e0ad1dabc55 | |
| parent | 7ea0dc5b457b955ff725e29b04a4922662bb2d79 (diff) | |
| download | boca-e3ac3a916759fcd52d316e79b4c969b7e01b1b68.tar.gz boca-e3ac3a916759fcd52d316e79b4c969b7e01b1b68.zip | |
fb
| -rw-r--r-- | src/fextdata.php | 2 | ||||
| -rw-r--r-- | src/site/getsite.php | 3 |
2 files changed, 3 insertions, 2 deletions
diff --git a/src/fextdata.php b/src/fextdata.php index cf42fc0..6acffaa 100644 --- a/src/fextdata.php +++ b/src/fextdata.php @@ -247,7 +247,7 @@ function getMainXML() { // LOGError("ok=" . $ok); if(substr($ok,strlen($ok)-strlen('TRANSFER OK'),strlen('TRANSFER OK')) == 'TRANSFER OK') { - $data = encryptData(generateSiteXML($contest, $localsite, $updatetime-30),myhash(myhash(trim($sitedata[2])) . $sess)); + $data = encryptData(generateSiteXML($contest, $localsite, $updatetime-30),myhash(trim($sitedata[2]))); $data_url = http_build_query(array('xml' => $data, 'updatetime' => ($updatetime-30) )); diff --git a/src/site/getsite.php b/src/site/getsite.php index 49b5fd2..3948d74 100644 --- a/src/site/getsite.php +++ b/src/site/getsite.php @@ -32,8 +32,9 @@ if($ct["contestlocalsite"]==$ct["contestmainsite"]) { if($fromsite != '' && is_numeric($fromsite) && $fromsite > 0) { if(isset($_POST)) { if(isset($_POST['xml'])) { + $u = DBUserInfo($_SESSION["usertable"]["contestnumber"], $_SESSION["usertable"]["sitenumber"], $_SESSION["usertable"]["usernumber"],null,false); // $fp=fopen('/tmp/aaa',"w"); fwrite($fp,$_POST['xml']); fclose($fp); - $s = decryptData(rawurldecode($_POST['xml']),$_SESSION["usertable"]["userpassword"],'xml from local not ok'); + $s = decryptData(rawurldecode($_POST['xml']),$u["userpassword"],'xml from local not ok'); // $fp=fopen('/tmp/aaa1',"w"); fwrite($fp,$s); fclose($fp); if(strtoupper(substr($s,0,5)) != "<XML>") { echo "<!-- <ERROR8> ".session_id() . " -->\n"; |