diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/filedownload.php | 1 | ||||
| -rw-r--r-- | src/filewindow.php | 1 | ||||
| -rw-r--r-- | src/flog.php | 22 |
3 files changed, 13 insertions, 11 deletions
diff --git a/src/filedownload.php b/src/filedownload.php index df45beb..bc2ebf1 100644 --- a/src/filedownload.php +++ b/src/filedownload.php @@ -34,6 +34,7 @@ if(!isset($_GET["oid"]) || !is_numeric($_GET["oid"]) || !isset($_GET["filename"] } $cf = globalconf(); +$uglysalt="30a2224c82dcf42e497e2a1f6bd6516b"; $fname = decryptData(myrawurldecode($_GET["filename"]), $uglysalt . $cf["key"]); if(isset($_GET["msg"])) diff --git a/src/filewindow.php b/src/filewindow.php index e685792..b858bbb 100644 --- a/src/filewindow.php +++ b/src/filewindow.php @@ -36,6 +36,7 @@ if(!isset($_GET["oid"]) || !is_numeric($_GET["oid"]) || !isset($_GET["filename"] } $cf = globalconf(); +$uglysalt="30a2224c82dcf42e497e2a1f6bd6516b"; $fname = decryptData(myrawurldecode($_GET["filename"]), $uglysalt . $cf["key"]); $msg = ''; if(isset($_GET["msg"])) diff --git a/src/flog.php b/src/flog.php index 9ff6357..b8f4122 100644 --- a/src/flog.php +++ b/src/flog.php @@ -177,23 +177,23 @@ function DBLogInContest($name,$pass,$contest,$msg=true) { unset($_SESSION["usertable"]); return false; } - if($prevuser != $ccode && $a["usertype"] == "team") { - LOGLevel("User $name tried to log in contest $contest but computer is invalid ($ccode).",2); - if($msg) MSGError("Invalid computer (3)."); - unset($_SESSION["usertable"]); - return false; - } + //if($prevuser != $ccode && $a["usertype"] == "team") { + // LOGLevel("User $name tried to log in contest $contest but computer is invalid ($ccode).",2); + // if($msg) MSGError("Invalid computer (3)."); + // unset($_SESSION["usertable"]); + // return false; + //} } else { if($a["usertype"] == "team") @file_put_contents($dircode, $ccode); } $gip=getIP(); - if(!ValidCookie(true,$gip)) { - if($msg) MSGError("Invalid computer (4)."); - unset($_SESSION["usertable"]); - return false; - } + //if(!ValidCookie(true,$gip)) { + // if($msg) MSGError("Invalid computer (4)."); + // unset($_SESSION["usertable"]); + // return false; + //} if ($a["userip"] != $gip && $a["userip"] != "" && $a["usertype"] != "score") { LOGLevel("User $name is using two different IPs: " . $a["userip"] . |