scratch – Diff between revs 53 and 57

Subversion Repositories:

?pathlinks?

Rev 53 – Rev 66 – Go to most recent revision – Details – Blame – Last modification – View Log

 require_once('inc/pseudocrypt.php');
 require_once('inc/functions.php');
 require_once('config.php');
 if(!isset($_POST['fingerprint']) or empty($_POST['fingerprint']) or
+    !isset($_POST['action']) or empty($_POST['action'])) {
-    !isset($_POST['action']) or empty($_POST['action']))
+    header('Internal server error.', true, 500);
+    return;
         return;
 #### Check fingerprint consistency.
+$fingerprint = strtoupper($_POST['fingerprint']);
-$fingerprint = strtoupper($_POST['fingerprint']);
+if(strlen($fingerprint) !== 32) {
+    header('Internal server error.', true, 500);
-if(strlen($fingerprint) !== 32)
+    return;
     return;
+$action = strtoupper($_POST['action']);
 $action = strtoupper($_POST['action']);
+#### Data must be sent in order to save a file.
 if($action === 'SAVE' and !isset($_POST['data'])) {
-#### Data must be sent in order to save a file.
+    header('Internal server error.', true, 500);
-if($action === 'SAVE' and !isset($_POST['data']))
+    return;
     return;
 );
 #### Check for path traversals
 $pathPart = pathinfo($userPath.'.html');
 if (strcasecmp(
+    realpath($pathPart['dirname']), realpath($STORE_FOLDER)) != 0) {
-    realpath($pathPart['dirname']), realpath($STORE_FOLDER)) != 0)
+    header('Internal server error.', true, 500);
+    return;
     return;
 switch($action) {
     case 'SAVE':
         #### Store the file.
         atomized_put_contents($userPath.'.html', $_POST['data']);
         break;
+    case 'LOAD':
-    case 'LOAD':
+        if(!file_exists($userPath.'.html')) {
+            header('File not found.', true, 404);
-        if(!file_exists($userPath.'.html'))
+            return;
             return;
         ### Set no-cache
         header('Content-Type: text/html; charset=utf-8');
         header('Cache-Control: no-cache, no-store, must-revalidate');