--- a/web/event_list.php	Mon Nov 25 22:28:08 2013 +0100
+++ b/web/event_list.php	Tue Nov 26 01:18:39 2013 +0100
@@ -9,7 +9,14 @@
 	$iv = substr($delete_enc, 0, $C_openssl_cipher_iv_length);
 	$delete_dec = substr(openssl_decrypt(substr($delete_enc, $C_openssl_cipher_iv_length), 'aes256', hash('sha256', SECRET, true), 0), $C_openssl_cipher_iv_length);
 	if(is_file($dir."/".$delete_dec)) {
-		unlink($dir."/".$delete_dec);
+		
+		foreach (glob("$dir/*") as $filename) {
+			$filename = basename($filename);
+		    if($filename !== "." && $filename != ".." && $filename === $delete_dec) {
+		    	// chek that file name is really in dir
+		    	unlink($dir."/".$delete_dec);
+		    }
+		}
 	}
 }