Changeset 6233

Show
Ignore:
Timestamp:
07/31/08 10:25:59 (2 months ago)
Author:
p_lindheimer
Message:

re #2983 get encryption key out of url, and re #2547

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • modules/branches/2.5/recordings/audio.php

    r6232 r6233  
    1010  include_once("crypt.php"); 
    1111 
    12   $REC_CRYPT_PASSWORD = (isset($_REQUEST['cryptpass']) && trim($_REQUEST['cryptpass']) != "")?trim($_REQUEST['cryptpass']):'moufdsuu3nma0'; 
     12       $REC_CRYPT_PASSWORD = (isset($amp_conf['AMPPLAYKEY']) && trim($amp_conf['AMPPLAYKEY']) != "")?trim($amp_conf['AMPPLAYKEY']):'moufdsuu3nma0'; 
    1313 
    1414  $crypt = new Crypt(); 
    1515 
    1616  $opath = $_GET['recording']; 
    17   $path = $crypt->decrypt($opath,urldecode($REC_CRYPT_PASSWORD)); 
     17  $path = $crypt->decrypt($opath,$REC_CRYPT_PASSWORD); 
    1818 
    1919  // strip ".." from path for security 
  • modules/branches/2.5/recordings/page.recordings.php

    r6232 r6233  
    510510        $audio=$astpath; 
    511511 
    512         $REC_CRYPT_PASSWORD = urlencode((isset($amp_conf['AMPPLAYKEY']) && trim($amp_conf['AMPPLAYKEY']) != "")?trim($amp_conf['AMPPLAYKEY']):'moufdsuu3nma0'); 
    513         $recurl=$_SERVER['PHP_SELF']."?display=recordings&action=popup&cryptpass=$REC_CRYPT_PASSWORD&recording=$audio"; 
     512        $recurl=$_SERVER['PHP_SELF']."?display=recordings&action=popup&recording=$audio"; 
    514513 
    515514        $html_txt .=  "<a href='#' ".(($count)?$hidden_state:'')." type='submit' id='play$count' onClick=\"javascript:popUp('$recurl',document.prompt.sysrec$count); return false;\" input='foo'>"; 
  • modules/branches/2.5/recordings/popup.php

    r6232 r6233  
    2424  $crypt = new Crypt(); 
    2525 
    26   $REC_CRYPT_PASSWORD = (isset($_REQUEST['cryptpass']) && trim($_REQUEST['cryptpass']) != "")?trim($_REQUEST['cryptpass']):'moufdsuu3nma0'; 
     26       $REC_CRYPT_PASSWORD = (isset($amp_conf['AMPPLAYKEY']) && trim($amp_conf['AMPPLAYKEY']) != "")?trim($amp_conf['AMPPLAYKEY']):'moufdsuu3nma0'; 
    2727  $file = $crypt->encrypt($_REQUEST['recording'],$REC_CRYPT_PASSWORD); 
    2828  $ufile = basename($_REQUEST['recording']); 
    29   $REC_CRYPT_PASSWORD = urlencode($REC_CRYPT_PASSWORD); 
    3029 
    3130  if (isset($file)) { 
    3231    echo("<br>"); 
    33     echo("<embed src='".$_SERVER['PHP_SELF']."?display=recordings&action=audio&cryptpass=$REC_CRYPT_PASSWORD&recording=$file' width=300, height=20 autoplay=true loop=false></embed><br>"); 
     32    echo("<embed src='".$_SERVER['PHP_SELF']."?display=recordings&action=audio&recording=$file' width=300, height=20 autoplay=true loop=false></embed><br>"); 
    3433    echo("<br><h1 class='popup_download'>playing: $ufile</h1><br>"); 
    3534  } 
Donate



Support
Download
Develop
Forums
News
Documentation
Paid Support
About

Paid Ads