Changeset 1612

Timestamp:

11/25/2006 09:51:15 AM (2 years ago)

Author:

driehle

Message:

implemented password protection for update

Files:

• trunk/admin/update.php (modified) (2 diffs)

trunk/admin/update.php

@@ -16 +16 @@
                dieses Plugins ist nicht notwendig.</p>
             <form action='' method='post'>
+             <p>Admin-Passwort: <input type='text' name='password' /></p>
              <p><input type='submit' name='update' value='Update durchführen' /></p>
             </form>";
 
-    if(isset($_POST['update'])) {
+    if(isset($_POST['update']) AND md5($_POST['password']) == JLOG_ADMIN_PASSWORD) {
         // Slashs in categorie URLs are no longer supported, therefore we are going
         // to replace all slashs in existings categories with an underline.
@@ -35 +36 @@
         $c['main'] .= "<p>Update erfolgreich verlaufen. <a href='../'>Viel Spaß!</a></p>";
     }
+    elseif(isset($_POST['update'])) {
+        $c['main'] .= error_output(array("Das Passwort ist leider falsch.")) . $form;
+    }
     else {
         $c['main'] .= $form;