From e34b437c297768a15cacda93a3befb280c3e2e8e Mon Sep 17 00:00:00 2001 From: KasperRT Date: Wed, 22 Oct 2014 22:18:05 +0200 Subject: [PATCH] fxed something with password adding --- php/change.php | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/php/change.php b/php/change.php index 6974c98f..5d3403f5 100755 --- a/php/change.php +++ b/php/change.php @@ -186,11 +186,16 @@ else if(isset($_GET['skip'])){ //skip song request $onlymusic = $_POST['onlymusic']; $removeplay = $_POST['removeplay']; $pass = $_POST['pass']; - $x = explode("/", htmlspecialchars(strtolower($_SERVER["REQUEST_URI"]))); - $pass=crypt($pass, '$6$rounds=9001$'.$x[1].'Fuck0ffuSn34kyn!ggerzZ$'); + $x = explode("/", htmlspecialchars(strtolower($_SERVER["REQUEST_URI"]))); + $pass=crypt($pass, '$6$rounds=9001$'.$x[1].'Fuck0ffuSn34kyn!ggerzZ$'); $data['conf']['adminpass'] = $pass; print_r($data); - file_put_contents($list, json_encode($data)); + $q = $data["conf"]; + $q = array_key_exists("adminpass", $q); + if(!$data["conf"]["adminpass"] == $pass || $q != 1) + { + file_put_contents($list, json_encode($data)); + } echo "vote: ".$vote.", addsongs: ".$addsongs.", longsongs: ".$longsongs.", frontpage: ".$frontpage.", onlymusic: ".$removeplay." pass: ".$pass; }else if(isset($_GET['timedifference'])){