From 7b4af63a90a726b98a59b83e53f040a7a566a11d Mon Sep 17 00:00:00 2001
From: Gitea <gitea@fake.local>
Date: Wed, 10 Nov 2021 17:53:13 +0100
Subject: Update

---
 Neutron-trunk/api/admin/appearance.php              | 3 ++-
 Neutron-trunk/api/admin/cache_content_reset.php     | 0
 Neutron-trunk/api/admin/cache_pages_update.php      | 0
 Neutron-trunk/api/admin/calendar_create.php         | 2 +-
 Neutron-trunk/api/admin/calendar_delete.php         | 2 +-
 Neutron-trunk/api/admin/calendar_nextevents.php     | 2 +-
 Neutron-trunk/api/admin/create_page.php             | 2 +-
 Neutron-trunk/api/admin/customization_colors.php    | 2 +-
 Neutron-trunk/api/admin/customization_theme.php     | 2 +-
 Neutron-trunk/api/admin/delete_page.php             | 2 +-
 Neutron-trunk/api/admin/edit_page.php               | 2 +-
 Neutron-trunk/api/admin/flag_disable.php            | 2 +-
 Neutron-trunk/api/admin/flag_enable.php             | 2 +-
 Neutron-trunk/api/admin/footer.php                  | 2 +-
 Neutron-trunk/api/admin/galery_create_category.php  | 2 +-
 Neutron-trunk/api/admin/galery_delete_category.php  | 2 +-
 Neutron-trunk/api/admin/galery_delete_image.php     | 2 +-
 Neutron-trunk/api/admin/galery_label_picture.php    | 2 +-
 Neutron-trunk/api/admin/galery_publish_photo.php    | 2 +-
 Neutron-trunk/api/admin/galery_toggle_state.php     | 2 +-
 Neutron-trunk/api/admin/instant_language_change.php | 2 +-
 Neutron-trunk/api/admin/login.php                   | 0
 Neutron-trunk/api/admin/password.php                | 2 +-
 Neutron-trunk/api/admin/rename_page.php             | 2 +-
 Neutron-trunk/api/admin/reset.php                   | 4 ++--
 Neutron-trunk/api/admin/save_advanced.php           | 2 +-
 Neutron-trunk/api/admin/widgets.php                 | 2 +-
 27 files changed, 26 insertions(+), 25 deletions(-)
 mode change 100755 => 100644 Neutron-trunk/api/admin/appearance.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/cache_content_reset.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/cache_pages_update.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/calendar_create.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/calendar_delete.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/calendar_nextevents.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/create_page.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/customization_colors.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/customization_theme.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/delete_page.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/edit_page.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/flag_disable.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/flag_enable.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/footer.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/galery_create_category.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/galery_delete_category.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/galery_delete_image.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/galery_label_picture.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/galery_publish_photo.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/galery_toggle_state.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/instant_language_change.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/login.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/password.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/rename_page.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/reset.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/save_advanced.php
 mode change 100755 => 100644 Neutron-trunk/api/admin/widgets.php

(limited to 'Neutron-trunk/api/admin')

diff --git a/Neutron-trunk/api/admin/appearance.php b/Neutron-trunk/api/admin/appearance.php
old mode 100755
new mode 100644
index 28ebe74..ec0eece
--- a/Neutron-trunk/api/admin/appearance.php
+++ b/Neutron-trunk/api/admin/appearance.php
@@ -2,8 +2,9 @@
 <?php
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
+$num_samples = 2;
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 if (isset($_POST['sitename'])) {
     if (trim($_POST['sitename']) == "") {
diff --git a/Neutron-trunk/api/admin/cache_content_reset.php b/Neutron-trunk/api/admin/cache_content_reset.php
old mode 100755
new mode 100644
diff --git a/Neutron-trunk/api/admin/cache_pages_update.php b/Neutron-trunk/api/admin/cache_pages_update.php
old mode 100755
new mode 100644
diff --git a/Neutron-trunk/api/admin/calendar_create.php b/Neutron-trunk/api/admin/calendar_create.php
old mode 100755
new mode 100644
index eff4682..6384528
--- a/Neutron-trunk/api/admin/calendar_create.php
+++ b/Neutron-trunk/api/admin/calendar_create.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/calendar_delete.php b/Neutron-trunk/api/admin/calendar_delete.php
old mode 100755
new mode 100644
index edeb86d..720a2f5
--- a/Neutron-trunk/api/admin/calendar_delete.php
+++ b/Neutron-trunk/api/admin/calendar_delete.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/calendar_nextevents.php b/Neutron-trunk/api/admin/calendar_nextevents.php
old mode 100755
new mode 100644
index 6dc0cae..c6fbec7
--- a/Neutron-trunk/api/admin/calendar_nextevents.php
+++ b/Neutron-trunk/api/admin/calendar_nextevents.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/create_page.php b/Neutron-trunk/api/admin/create_page.php
old mode 100755
new mode 100644
index f7d67e7..cdffbff
--- a/Neutron-trunk/api/admin/create_page.php
+++ b/Neutron-trunk/api/admin/create_page.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/customization_colors.php b/Neutron-trunk/api/admin/customization_colors.php
old mode 100755
new mode 100644
index 9e650e8..d784134
--- a/Neutron-trunk/api/admin/customization_colors.php
+++ b/Neutron-trunk/api/admin/customization_colors.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/customization_theme.php b/Neutron-trunk/api/admin/customization_theme.php
old mode 100755
new mode 100644
index cc4d081..f161f43
--- a/Neutron-trunk/api/admin/customization_theme.php
+++ b/Neutron-trunk/api/admin/customization_theme.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/delete_page.php b/Neutron-trunk/api/admin/delete_page.php
old mode 100755
new mode 100644
index beaf8f0..be33058
--- a/Neutron-trunk/api/admin/delete_page.php
+++ b/Neutron-trunk/api/admin/delete_page.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/edit_page.php b/Neutron-trunk/api/admin/edit_page.php
old mode 100755
new mode 100644
index 17d84bb..cf88aaa
--- a/Neutron-trunk/api/admin/edit_page.php
+++ b/Neutron-trunk/api/admin/edit_page.php
@@ -8,7 +8,7 @@ if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/system.log")) {
 } else {
     file_put_contents($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/system.log", date("d/m/Y H:i:s") . " - API/" . $_SERVER['REQUEST_METHOD'] . " - " . $_SERVER['REQUEST_URI'] . " - " . $_SERVER['HTTP_USER_AGENT'] . "\n\n");
 }
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
         if (isset($_POST['content'])) {
             if (isset($_POST['title'])) {
diff --git a/Neutron-trunk/api/admin/flag_disable.php b/Neutron-trunk/api/admin/flag_disable.php
old mode 100755
new mode 100644
index d15b667..92d940d
--- a/Neutron-trunk/api/admin/flag_disable.php
+++ b/Neutron-trunk/api/admin/flag_disable.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/flag_enable.php b/Neutron-trunk/api/admin/flag_enable.php
old mode 100755
new mode 100644
index 0f2a9f4..0f95e26
--- a/Neutron-trunk/api/admin/flag_enable.php
+++ b/Neutron-trunk/api/admin/flag_enable.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/footer.php b/Neutron-trunk/api/admin/footer.php
old mode 100755
new mode 100644
index 5422d0c..961f8ea
--- a/Neutron-trunk/api/admin/footer.php
+++ b/Neutron-trunk/api/admin/footer.php
@@ -8,7 +8,7 @@ if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/system.log")) {
 } else {
     file_put_contents($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/system.log", date("d/m/Y H:i:s") . " - API/" . $_SERVER['REQUEST_METHOD'] . " - " . $_SERVER['REQUEST_URI'] . " - " . $_SERVER['HTTP_USER_AGENT'] . "\n\n");
 }
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
         if (isset($_POST['footer'])) {
             file_put_contents($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/footer", $_POST['footer']);
diff --git a/Neutron-trunk/api/admin/galery_create_category.php b/Neutron-trunk/api/admin/galery_create_category.php
old mode 100755
new mode 100644
index a849d05..26c63d4
--- a/Neutron-trunk/api/admin/galery_create_category.php
+++ b/Neutron-trunk/api/admin/galery_create_category.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/galery_delete_category.php b/Neutron-trunk/api/admin/galery_delete_category.php
old mode 100755
new mode 100644
index 603a5d0..0fb74e7
--- a/Neutron-trunk/api/admin/galery_delete_category.php
+++ b/Neutron-trunk/api/admin/galery_delete_category.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/galery_delete_image.php b/Neutron-trunk/api/admin/galery_delete_image.php
old mode 100755
new mode 100644
index 88ca220..a2dc112
--- a/Neutron-trunk/api/admin/galery_delete_image.php
+++ b/Neutron-trunk/api/admin/galery_delete_image.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/galery_label_picture.php b/Neutron-trunk/api/admin/galery_label_picture.php
old mode 100755
new mode 100644
index 07b3b59..4ce1ded
--- a/Neutron-trunk/api/admin/galery_label_picture.php
+++ b/Neutron-trunk/api/admin/galery_label_picture.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/galery_publish_photo.php b/Neutron-trunk/api/admin/galery_publish_photo.php
old mode 100755
new mode 100644
index a4c9628..8df004e
--- a/Neutron-trunk/api/admin/galery_publish_photo.php
+++ b/Neutron-trunk/api/admin/galery_publish_photo.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/galery_toggle_state.php b/Neutron-trunk/api/admin/galery_toggle_state.php
old mode 100755
new mode 100644
index 582faa9..224ec45
--- a/Neutron-trunk/api/admin/galery_toggle_state.php
+++ b/Neutron-trunk/api/admin/galery_toggle_state.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/instant_language_change.php b/Neutron-trunk/api/admin/instant_language_change.php
old mode 100755
new mode 100644
index c4fd575..1e5535f
--- a/Neutron-trunk/api/admin/instant_language_change.php
+++ b/Neutron-trunk/api/admin/instant_language_change.php
@@ -8,7 +8,7 @@ if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/system.log")) {
 } else {
     file_put_contents($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/system.log", date("d/m/Y H:i:s") . " - API/" . $_SERVER['REQUEST_METHOD'] . " - " . $_SERVER['REQUEST_URI'] . " - " . $_SERVER['HTTP_USER_AGENT'] . "\n\n");
 }
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
         if (isset($_POST['lang'])) {
             file_put_contents($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/lang", $_POST['lang']);
diff --git a/Neutron-trunk/api/admin/login.php b/Neutron-trunk/api/admin/login.php
old mode 100755
new mode 100644
diff --git a/Neutron-trunk/api/admin/password.php b/Neutron-trunk/api/admin/password.php
old mode 100755
new mode 100644
index a823721..ff57028
--- a/Neutron-trunk/api/admin/password.php
+++ b/Neutron-trunk/api/admin/password.php
@@ -46,7 +46,7 @@ if ($_POST['newpass'] == $_POST['newpassr']) {} else {
     require $_SERVER['DOCUMENT_ROOT'] . "/api/electrode/quit.php";quit($lang["api"]["passnewnomatch"]);
 }
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
         $tokens = scandir($_SERVER['DOCUMENT_ROOT'] . "/data/tokens");
         foreach ($tokens as $token) {
diff --git a/Neutron-trunk/api/admin/rename_page.php b/Neutron-trunk/api/admin/rename_page.php
old mode 100755
new mode 100644
index 4091940..b7f023c
--- a/Neutron-trunk/api/admin/rename_page.php
+++ b/Neutron-trunk/api/admin/rename_page.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
diff --git a/Neutron-trunk/api/admin/reset.php b/Neutron-trunk/api/admin/reset.php
old mode 100755
new mode 100644
index 7c67207..f732ad9
--- a/Neutron-trunk/api/admin/reset.php
+++ b/Neutron-trunk/api/admin/reset.php
@@ -18,7 +18,7 @@ function rrmdir($dir) {
     } 
   }
 
-  if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+  if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
@@ -60,7 +60,7 @@ if ($keep) {
     rrmdir($_SERVER['DOCUMENT_ROOT'] . "/resources/upload");
     mkdir($_SERVER['DOCUMENT_ROOT'] . "/resources/upload");
     copy($_SERVER['DOCUMENT_ROOT'] . "/resources/image/siteicon.png", $_SERVER['DOCUMENT_ROOT'] . "/resources/upload/siteicon.png");
-    file_put_contents($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/widgets.json", '{"list":[],"settings":{}');
+    file_put_contents($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/widgets.json", '{"list":[]}');
     rrmdir($_SERVER['DOCUMENT_ROOT'] . "/data/tokens");
     rrmdir($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/cache");
     mkdir($_SERVER['DOCUMENT_ROOT'] . "/data/tokens");
diff --git a/Neutron-trunk/api/admin/save_advanced.php b/Neutron-trunk/api/admin/save_advanced.php
old mode 100755
new mode 100644
index 179f22d..4d7c958
--- a/Neutron-trunk/api/admin/save_advanced.php
+++ b/Neutron-trunk/api/admin/save_advanced.php
@@ -13,7 +13,7 @@ if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/system.log")) {
 } else {
     file_put_contents($_SERVER['DOCUMENT_ROOT'] . "/data/webcontent/system.log", date("d/m/Y H:i:s") . " - API/" . $_SERVER['REQUEST_METHOD'] . " - " . $_SERVER['REQUEST_URI'] . " - " . $_SERVER['HTTP_USER_AGENT'] . "\n\n");
 }
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
         if (isset($_POST['content'])) {
             if (true) {
diff --git a/Neutron-trunk/api/admin/widgets.php b/Neutron-trunk/api/admin/widgets.php
old mode 100755
new mode 100644
index 231543f..f87a01b
--- a/Neutron-trunk/api/admin/widgets.php
+++ b/Neutron-trunk/api/admin/widgets.php
@@ -3,7 +3,7 @@
 
 require_once $_SERVER['DOCUMENT_ROOT'] . "/api/lang/processor.php";
 
-if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/") {
+if (isset($_COOKIE['_NEUTRON_ADMIN_TOKEN']) && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != ".." && $_COOKIE['_NEUTRON_ADMIN_TOKEN'] != "/" && strpos($_COOKIE['_NEUTRON_ADMIN_TOKEN'], "/") === false) {
     if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/data/tokens/" . $_COOKIE['_NEUTRON_ADMIN_TOKEN'])) {
 
     } else {
-- 
cgit