From 70f9089fcfb857da0864ec0701f2a886b5e1dbff Mon Sep 17 00:00:00 2001
From: Alexander Sulfrian <alexander@sulfrian.net>
Date: Sun, 30 May 2010 16:59:08 +0200
Subject: fix bug allowing every one to delete the paste

with the mysql storage back end on every call the delete token
was regenerated so, that every one could delete the paste
---
 paste/include/storage/StorageEngine.php | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

(limited to 'paste/include/storage/StorageEngine.php')

diff --git a/paste/include/storage/StorageEngine.php b/paste/include/storage/StorageEngine.php
index db6e34b..09e1676 100644
--- a/paste/include/storage/StorageEngine.php
+++ b/paste/include/storage/StorageEngine.php
@@ -38,11 +38,17 @@ abstract class StorageEngine
 	abstract public function getContent($pid);
 	abstract public function delContent($pid);
 
-	public function generateToken($name)
+	public function generateToken($name, $remote = '')
 	{
 		global $config;
 
-		$ipAddr = $_SERVER["REMOTE_ADDR"];
+		if (! empty($remote)) {
+			$ipAddr = $remote;
+		}
+		else {
+			$ipAddr = $_SERVER["REMOTE_ADDR"];
+		}
+
 		return sha1($name . $ipAddr . $config['token_salt']);
 	}
 }
-- 
cgit v1.2.3