CheckPassword(base64_encode($_POST['secure-pass']), $GLOBALS['DUPX_AC']->secure_pass); //FORWARD: password not enabled if (! $GLOBALS['DUPX_AC']->secure_on && ! $_GET['debug']) { DUPX_HTTP::post_with_html($page_url, array( 'action_step' => '1', 'csrf_token' => DUPX_CSRF::generate('step1') )); exit; } //POSTBACK: valid password if ($pass_check) { DUPX_HTTP::post_with_html($page_url, array( 'action_step' => '1', 'csrf_token' => DUPX_CSRF::generate('step1'), 'secure-pass' => $_POST['secure-pass'] )); exit; } //ERROR: invalid password if ($_POST['secure-try'] && ! $pass_check) { $page_err = 1; } ?>