Fix downloading SQLite database from all users

2 files changed, 11 insertions, 11 deletions

diff --git a/inc/poche/Routing.class.php b/inc/poche/Routing.class.php
index 004bd45a..0b373058 100755
--- a/inc/poche/Routing.class.php
+++ b/inc/poche/Routing.class.php
@@ -124,8 +124,6 @@ class Routing
             } elseif (isset($_GET['import'])) {
                 $import = $this->wallabag->import();
                 $tplVars = array_merge($this->vars, $import);
-            } elseif (isset($_GET['download'])) {
-                Tools::downloadDb();
             } elseif (isset($_GET['empty-cache'])) {
                 Tools::emptyCache();
             } elseif (isset($_GET['export'])) {
diff --git a/inc/poche/Tools.class.php b/inc/poche/Tools.class.php
index 63137d76..c2c1bdab 100755
--- a/inc/poche/Tools.class.php
+++ b/inc/poche/Tools.class.php
@@ -296,18 +296,20 @@ final class Tools
 
     /**
      * Download the sqlite database
+     * Function not longer used for security reasons
      */
-    public static function downloadDb()
-    {
-        header('Content-Disposition: attachment; filename="poche.sqlite.gz"');
-        self::_status(200);
 
-        header('Content-Transfer-Encoding: binary');
-        header('Content-Type: application/octet-stream');
-        echo gzencode(file_get_contents(STORAGE_SQLITE));
+    // public static function downloadDb()
+    // {
+    //     header('Content-Disposition: attachment; filename="poche.sqlite.gz"');
+    //     self::_status(200);
 
-        exit;
-    }
+    //     header('Content-Transfer-Encoding: binary');
+    //     header('Content-Type: application/octet-stream');
+    //     echo gzencode(file_get_contents(STORAGE_SQLITE));
+
+    //     exit;
+    // }
 
     /**
      * Get the content for a given URL (by a call to FullTextFeed)