Fix downloading SQLite database from all users

4 files changed, 11 insertions, 14 deletions

diff --git a/inc/poche/Routing.class.php b/inc/poche/Routing.class.php
index 004bd45a..0b373058 100755
--- a/inc/poche/Routing.class.php
+++ b/inc/poche/Routing.class.php
@@ -124,8 +124,6 @@ class Routing
             } elseif (isset($_GET['import'])) {
                 $import = $this->wallabag->import();
                 $tplVars = array_merge($this->vars, $import);
-            } elseif (isset($_GET['download'])) {
-                Tools::downloadDb();
             } elseif (isset($_GET['empty-cache'])) {
                 Tools::emptyCache();
             } elseif (isset($_GET['export'])) {
diff --git a/inc/poche/Tools.class.php b/inc/poche/Tools.class.php
index 63137d76..c2c1bdab 100755
--- a/inc/poche/Tools.class.php
+++ b/inc/poche/Tools.class.php
@@ -296,18 +296,20 @@ final class Tools
 
     /**
      * Download the sqlite database
+     * Function not longer used for security reasons
      */
-    public static function downloadDb()
-    {
-        header('Content-Disposition: attachment; filename="poche.sqlite.gz"');
-        self::_status(200);
 
-        header('Content-Transfer-Encoding: binary');
-        header('Content-Type: application/octet-stream');
-        echo gzencode(file_get_contents(STORAGE_SQLITE));
+    // public static function downloadDb()
+    // {
+    //     header('Content-Disposition: attachment; filename="poche.sqlite.gz"');
+    //     self::_status(200);
 
-        exit;
-    }
+    //     header('Content-Transfer-Encoding: binary');
+    //     header('Content-Type: application/octet-stream');
+    //     echo gzencode(file_get_contents(STORAGE_SQLITE));
+
+    //     exit;
+    // }
 
     /**
      * Get the content for a given URL (by a call to FullTextFeed)
diff --git a/themes/baggy/config.twig b/themes/baggy/config.twig
index e45c3218..7bd229cb 100755
--- a/themes/baggy/config.twig
+++ b/themes/baggy/config.twig
@@ -121,8 +121,6 @@
             <p><a href="?import">{% trans "You can click here to fetch content for articles with no content." %}</a></p>
             
             <h2>{% trans "Export your wallabag data" %}</h2>
-            {% if constant('STORAGE') == 'sqlite' %}
-            <p><a href="?download" target="_blank">{% trans "Click here" %}</a> {% trans "to download your database." %}</p>{% endif %}
             <p><a href="?export" target="_blank">{% trans "Click here" %}</a> {% trans "to export your wallabag data." %}</p>
             
             <h2>{% trans "Fancy an E-Book ?" %}</h2>
diff --git a/themes/default/config.twig b/themes/default/config.twig
index 8f047ae6..5656fadd 100755
--- a/themes/default/config.twig
+++ b/themes/default/config.twig
@@ -121,7 +121,6 @@
 
             <h2>{% trans "Export your wallabag data" %}</h2>
             {% if constant('STORAGE') == 'sqlite' %}
-            <p><a href="?download" target="_blank">{% trans "Click here" %}</a> {% trans "to download your database." %}</p>{% endif %}
             <p><a href="?export" target="_blank">{% trans "Click here" %}</a> {% trans "to export your wallabag data." %}</p>
 
             <h2>{% trans "Cache" %}</h2>