From edaa7f5611198949e327d1324a33198f0459182a Mon Sep 17 00:00:00 2001
From: Hannes Verschore <hv1989@gmail.com>
Date: Wed, 19 Nov 2014 10:11:08 -0800
Subject: [PATCH] Fix issue

---
 website/data.php | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/website/data.php b/website/data.php
index 2ae80f1..0a3442e 100644
--- a/website/data.php
+++ b/website/data.php
@@ -2,6 +2,8 @@
 
 $datafolder = "/home/h4writer/data/";
 
+include "internals.php";
+
 function fault() {
 	exit();
 }
@@ -9,18 +11,18 @@ function fault() {
 if (!isset($_GET["file"]))
 	fault();
 
-$file = $_GET["file"];
-if (substr($file, 0, 4) == "auth")
+$name = $_GET["file"];
+if (substr($name, 0, 4) == "auth")
 	fault();
-if (!preg_match("/^[a-zA-Z0-9-.]*$/i", $file))
+if (!preg_match("/^[a-zA-Z0-9-. ]*$/i", $name))
 	fault();
 
-$file = $datafolder.$file;
+$file = $datafolder.$name;
 if (!file_exists($file)) {
 	if (!has_permissions())
 		fault();
 
-	$file = $datafolder."auth-".$file;
+	$file = $datafolder."auth-".$name;
 	if (!file_exists($file))
 		fault();
 }