From 0125c31f7f4cc0ac62c4c28fd6288e8f62e821b5 Mon Sep 17 00:00:00 2001
From: "gitlab.com/pepa65" <pepa65@passchier.net>
Date: Tue, 6 Sep 2022 12:59:01 +0700
Subject: [PATCH] Fix auth

---
 Caddyfile             | 2 +-
 uploadpage/index.php  | 4 ++--
 uploadpage/upload.php | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/Caddyfile b/Caddyfile
index 1fe8d46..a9977e3 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -1,5 +1,5 @@
 %interface% {
-	basicauth {
+	basicauth / {
 %userpw%	}
 	log {
 		output file /var/www/upload.log
diff --git a/uploadpage/index.php b/uploadpage/index.php
index 4d43aa1..4c96df7 100644
--- a/uploadpage/index.php
+++ b/uploadpage/index.php
@@ -17,7 +17,7 @@ $headers=getallheaders();
 $authuser=$headers['X-User'];
 if($authuser!==''){
 	print('
-			<form action="'.(isset($_SERVER['HTTPS']) ? 'https' : 'http').'://nouser@'.$_SERVER['HTTP_HOST'].'" method="post">
+			<form action="'.(isset($_SERVER['HTTPS']) ? 'https' : 'http').'://nouser:wrongpw@'.$_SERVER['HTTP_HOST'].'" method="post">
 				<tr><td></td><td align="center"><h1>Stream Upload</h1></td></tr>
 				<tr>
 					<td class="left">User:</td>
@@ -26,7 +26,7 @@ if($authuser!==''){
 			</form>');
 }
 ?>
-			<form action="upload.php" method="post" enctype="multipart/form-data" onsubmit="respond()">
+			<form action="'.(isset($_SERVER['HTTPS']) ? 'https' : 'http').'://upload.php" method="post" enctype="multipart/form-data" onsubmit="respond()">
 				<tr>
 					<td>Target:</td>
 					<td>
diff --git a/uploadpage/upload.php b/uploadpage/upload.php
index 2818c06..c1c9a6b 100644
--- a/uploadpage/upload.php
+++ b/uploadpage/upload.php
@@ -8,7 +8,7 @@ if($_SERVER['REQUEST_METHOD']!=='POST'){
 
 function Back($msg){
 	print('<p>'.$msg.'</p>
-<form action="/" method="post">
+<form action="'.(isset($_SERVER['HTTPS']) ? 'https' : 'http').'://'.$_SERVER['HTTP_HOST'].'" method="post">
 <input type="submit" value="Upload another file" name="submit">
 </form></div>');
 	exit;