.
*
*************************************************************/
// before anything else, check that data has arrived here via HTTPS
if ($_SERVER['HTTPS'] != "on") {
die ("Use a secure HTTPS connection to the server. Aborting ...");
}
if (strtoupper($_SERVER['REQUEST_METHOD']) != "POST") {
//check if there is a query string, then abort.
if (count($_GET) != 0){
die ("Always use POST to prevent recording of query strings. Aborting ...");
}
}
if (! is_file("gpgconfig.php")){
die ("Config file does not exist.");
}
require_once('gpgconfig.php');
if (! is_dir($GPGDIR)){
die ("GPG directory $GPGDIR does not exist.");
}
else {
$ERRORFILE = $GPGDIR."/gpgerrors";
}
if (! isset($PLAINRETURN)){
$PLAINRETURN = "no";
}
if (isset($_REQUEST[$DECRYPTIONTEXTAREA])) {
$TEXT = $_REQUEST[$DECRYPTIONTEXTAREA];
$TEXT = addslashes($TEXT);
}
if (isset($_REQUEST['secret'])) {
$SECRET = $_REQUEST['secret'];
}
if (! isset($KEYSELECTION)){
$KEYSELECTION = "no";
}
if (! isset($DECRYPTIONIFRAMENUMBER)){
$DECRYPTIONIFRAMENUMBER = 0;
}
if (isset($_REQUEST['decryptionkey'])){
$DECRYPTIONKEY = $_REQUEST['decryptionkey'];
}
echo "\n";
echo "