From 2c93be01745d4e7cba7c457e1bec161380d7fcab Mon Sep 17 00:00:00 2001
From: DL6ER <derigs@ph1.uni-koeln.de>
Date: Sun, 20 Nov 2016 14:52:53 +0100
Subject: [PATCH] Extended current password protection to gravity.sh page

---
 header.php         | 2 +-
 php/gravity.sh.php | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/header.php b/header.php
index 766b52f6..9d092e77 100644
--- a/header.php
+++ b/header.php
@@ -242,7 +242,7 @@
                 </li>
                 <!-- Run gravity.sh -->
                 <li>
-                    <a href="gravity.php">
+                    <a href="gravity.php?<?php echo $pwstring; ?>">
                         <i class="fa fa-arrow-circle-down"></i> <span>Update lists</span>
                     </a>
                 </li>
diff --git a/php/gravity.sh.php b/php/gravity.sh.php
index 80dcb385..257cfa3c 100644
--- a/php/gravity.sh.php
+++ b/php/gravity.sh.php
@@ -1,4 +1,7 @@
 <?php
+require "password.php";
+if(!$auth) die("Not authorized");
+
 ob_end_flush();
 ini_set("output_buffering", "0");
 ob_implicit_flush(true);