diff -r dd96593acbbb -r f40a6a61d224 web/event_list.php --- a/web/event_list.php Mon Nov 25 19:07:05 2013 +0100 +++ b/web/event_list.php Mon Nov 25 19:14:10 2013 +0100 @@ -7,7 +7,7 @@ if(isset($_REQUEST['delete']) && !empty($_REQUEST['delete'])) { $delete_enc = base64_decode($_REQUEST['delete']); $iv = substr($delete_enc, 0, $C_openssl_cipher_iv_length); - $delete_dec = openssl_decrypt(substr($delete_enc, $C_openssl_cipher_iv_length), 'aes256', hash('sha256', SECRET, true), 0, $iv); + $delete_dec = substr(openssl_decrypt($delete_enc, 'aes256', hash('sha256', SECRET, true), 0), $C_openssl_cipher_iv_length); if(is_file($dir."/".$delete_dec)) { unlink($dir."/".$delete_dec); } @@ -103,11 +103,10 @@ $token = base64_encode( $iv . openssl_encrypt( - $ind_file, + $iv.$ind_file, 'aes256', hash('sha256', SECRET, true), - 0, - $iv + 0 ) ); ?>