--- a/web/event_list.php	Mon Nov 25 19:14:24 2013 +0100
+++ b/web/event_list.php	Mon Nov 25 19:18:11 2013 +0100
@@ -7,7 +7,7 @@
 if(isset($_REQUEST['delete']) && !empty($_REQUEST['delete'])) {
 	$delete_enc = base64_decode($_REQUEST['delete']);
 	$iv = substr($delete_enc, 0, $C_openssl_cipher_iv_length);
-	$delete_dec = substr(openssl_decrypt($delete_enc, 'aes256', hash('sha256', SECRET, true), 0), $C_openssl_cipher_iv_length);
+	$delete_dec = substr(openssl_decrypt(substr($delete_enc, $C_openssl_cipher_iv_length), 'aes256', hash('sha256', SECRET, true), 0), $C_openssl_cipher_iv_length);
 	if(is_file($dir."/".$delete_dec)) {
 		unlink($dir."/".$delete_dec);
 	}