aboutsummaryrefslogtreecommitdiff
path: root/src/filedownload.php
diff options
context:
space:
mode:
Diffstat (limited to 'src/filedownload.php')
-rw-r--r--src/filedownload.php6
1 files changed, 3 insertions, 3 deletions
diff --git a/src/filedownload.php b/src/filedownload.php
index e1ef6b9..df45beb 100644
--- a/src/filedownload.php
+++ b/src/filedownload.php
@@ -34,12 +34,12 @@ if(!isset($_GET["oid"]) || !is_numeric($_GET["oid"]) || !isset($_GET["filename"]
}
$cf = globalconf();
-$fname = decryptData(myrawurldecode($_GET["filename"]), session_id() . $cf["key"]);
+$fname = decryptData(myrawurldecode($_GET["filename"]), $uglysalt . $cf["key"]);
if(isset($_GET["msg"]))
- $p = myhash($_GET["oid"] . $fname . myrawurldecode($_GET["msg"]) . session_id() . $cf["key"]);
+ $p = myhash($_GET["oid"] . $fname . myrawurldecode($_GET["msg"]) . $uglysalt . $cf["key"]);
else
- $p = myhash($_GET["oid"] . $fname . session_id() . $cf["key"]);
+ $p = myhash($_GET["oid"] . $fname . $uglysalt . $cf["key"]);
if($p != $_GET["check"]) {
echo "<html><head><title>View Page</title>";