From 545571f8c8ebe421c129480a1fc7096826f359db Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kasper=20Rynning-T=C3=B8nnesen?= <kasper@kasperrt.no>
Date: Thu, 14 May 2015 16:15:35 +0200
Subject: [PATCH] Making the passwords more safe

---
 php/footer.php       |  1 +
 static/js/admin.js   | 10 +++++++---
 static/js/youtube.js |  3 ++-
 3 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/php/footer.php b/php/footer.php
index 23068ed6..0d4c15bb 100755
--- a/php/footer.php
+++ b/php/footer.php
@@ -56,6 +56,7 @@
 <script type="text/javascript" src="static/js/lib/jquery-ui-1.10.3.min.js"></script>-->
 <script src="//cdn.socket.io/socket.io-1.2.0.js"></script>
 <script type="text/javascript" src="static/js/lib/iscroll-min.js"></script>
+<script src="http://crypto-js.googlecode.com/svn/tags/3.1.2/build/rollups/sha256.js"></script>
 <script>
     var socket = io.connect('http://'+window.location.hostname+':3000');
     var guid = "<?php echo $guid; ?>";
diff --git a/static/js/admin.js b/static/js/admin.js
index 003cc04f..39fd4d1d 100755
--- a/static/js/admin.js
+++ b/static/js/admin.js
@@ -14,7 +14,10 @@ socket.on("toast", function(msg)
 	        break;
 	    case "wrongpass":
 	        msg=rnd(["That's not the right password!", "Wrong! Better luck next time...", "You seem to have mistyped the password", "Incorrect. Have you tried meditating?","Nope, wrong password!", "Wrong password. The authorities have been notified."])
-	        break;
+					if(localStorage[chan.toLowerCase()]){
+						localStorage.removeItem(chan.toLowerCase());
+					}
+					break;
 		case "shuffled":
 	        msg=rnd(["I vigorously stirred your playlist!", "I hope you like your list stirred, not shaken.", "I shuffled your playlist with the cosmic background radiation as a seed. Enjoy.", "100% randomized, for your listening pleasure!", "I hope you enjoy your fresh playlist!"])
 	        break;
@@ -75,12 +78,13 @@ $('input[class=conf]').change(function()
 
 function pass_save()
 {
-	socket.emit('password', [document.getElementById("password").value, chan.toLowerCase(), guid]);
+
+	socket.emit('password', [CryptoJS.SHA256(document.getElementById("password").value).toString(), chan.toLowerCase(), guid]);
 }
 
 function log_out(){
 	if(localStorage[chan.toLowerCase()]){
-		localStorage.removeItem(chan.toLowerCase())
+		localStorage.removeItem(chan.toLowerCase());
 		w_p = true;
 		names=["vote","addsongs","longsongs","frontpage", "allvideos", "removeplay", "skip", "shuffle"];
 		for (var i = 0; i < names.length; i++) {
diff --git a/static/js/youtube.js b/static/js/youtube.js
index 0f9db801..d59fca88 100755
--- a/static/js/youtube.js
+++ b/static/js/youtube.js
@@ -104,7 +104,8 @@ $(document).ready(function()
 
 		if(localStorage[chan.toLowerCase()])
 		{
-			socket.emit("password", [localStorage[chan.toLowerCase()], chan.toLowerCase(), guid]);
+			localStorage.removeItem(chan.toLowerCase());
+			//socket.emit("password", [localStorage[chan.toLowerCase()], chan.toLowerCase(), guid]);
 		}
 
 		if($("#chan").html().toLowerCase() == "jazz")