sebsauvage / ZeroBin

A minimalist, opensource online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
http://sebsauvage.net/wiki/doku.php?id=php:zerobin
952 stars 213 forks source link

Access/Update bug/feature? #110

Open cryptolok opened 8 years ago

cryptolok commented 8 years ago

Greetings, I have noticed a behavior that I doubt to be regular. If I provide just the identifier, but not the key, I won't be able to decryp the data, which is normal. However, if I complete the URL with the key, the page won't update until a manual reload (probably caused by a loop in JavaScript). Furthermore, if the burn option is set, this will cause the data deletion, without even viewing it. So it's suppose to be deletable without a key? Anyway, I greatly appreciate the effort you put on such a successful and valuable project as ZeroBin.

rugk commented 8 years ago

This project is unmaintained. Please have a look at this fork: https://github.com/PrivateBin/PrivateBin