From e714286e5a63d815349f7a480b1e870b81caca05 Mon Sep 17 00:00:00 2001
From: Skylar Ittner <admin@netsyms.com>
Date: Sat, 24 Nov 2018 00:59:50 -0700
Subject: [PATCH] Close #13

---
 langs/en/cards.json |  1 +
 langs/en/sync.json  |  3 ++-
 pages/sync.php      | 29 ++++++++++++++---------------
 static/js/app.js    |  2 ++
 4 files changed, 19 insertions(+), 16 deletions(-)

diff --git a/langs/en/cards.json b/langs/en/cards.json
index be53166..c79b73f 100644
--- a/langs/en/cards.json
+++ b/langs/en/cards.json
@@ -1,4 +1,5 @@
 {
+    "Create virtual notes and lists": "Create virtual notes and lists",
     "Punch in and check work schedule": "Punch in and check work schedule",
     "Manage physical items": "Manage physical items",
     "Create and publish e-newsletters": "Create and publish e-newsletters",
diff --git a/langs/en/sync.json b/langs/en/sync.json
index 0f43b93..225f3a2 100644
--- a/langs/en/sync.json
+++ b/langs/en/sync.json
@@ -12,5 +12,6 @@
     "sync code name": "Device nickname",
     "notification feed explained": "You can receive notifications via a RSS or ATOM news reader by clicking one of the buttons or manually adding a URL.  Click the Reset button if you think someone else might know your feed URL (you'll need to delete and re-add the feed on all your devices).",
     "Reset": "Reset",
-    "Feed key reset.": "Feed key reset."
+    "Feed key reset.": "Feed key reset.",
+    "Revoke key": "Revoke key"
 }
diff --git a/pages/sync.php b/pages/sync.php
index 450dd46..b254940 100644
--- a/pages/sync.php
+++ b/pages/sync.php
@@ -22,13 +22,9 @@ if (!empty($_GET['delsynccode'])) {
                 <hr />
                 <?php
                 if (!empty($_GET['mobilecode']) && $_GET['mobilecode'] == "generate") {
-                    if (!empty($_GET['showsynccode']) && $database->has("mobile_codes", ["AND" => ["uid" => $_SESSION['uid'], "codeid" => $_GET['showsynccode']]])) {
-                        $code = $database->get("mobile_codes", 'code', ["AND" => ["uid" => $_SESSION['uid'], "codeid" => $_GET['showsynccode']]]);
-                    } else {
-                        $code = strtoupper(substr(md5(mt_rand() . uniqid("", true)), 0, 20));
-                        $desc = htmlspecialchars($_POST['desc']);
-                        $database->insert('mobile_codes', ['uid' => $_SESSION['uid'], 'code' => $code, 'description' => $desc]);
-                    }
+                    $code = strtoupper(substr(md5(mt_rand() . uniqid("", true)), 0, 20));
+                    $desc = htmlspecialchars($_POST['desc']);
+                    $database->insert('mobile_codes', ['uid' => $_SESSION['uid'], 'code' => $code, 'description' => $desc]);
                     if (strpos(URL, "http") === 0) {
                         $url = URL . "mobile/index.php";
                     } else {
@@ -88,21 +84,24 @@ if (!empty($_GET['delsynccode'])) {
                 <?php
                 if (count($activecodes) > 0) {
                     foreach ($activecodes as $c) {
+                        // Obscure characters
+                        if (strlen($c['code']) > 7) {
+                            for ($i = 3; $i < strlen($c['code']) - 3; $i++) {
+                                $c['code'][$i] = "*";
+                            }
+                        }
                         ?>
                         <div class="list-group-item d-flex justify-content-between align-items-center">
                             <div>
-                                <div class="text-monospace">
-                                    <?php echo trim(chunk_split($c['code'], 5, ' ')); ?>
+                                <div class="">
+                                    <?php echo $c['description']; ?>
                                 </div>
-                                <div class="text-muted">
-                                    <i class="fas fa-mobile-alt"></i> <?php echo $c['description']; ?>
+                                <div class="text-muted text-monospace">
+                                    <?php echo $c['code']; ?>
                                 </div>
                             </div>
                             <div>
-                                <a class="btn btn-primary btn-sm m-1" href="app.php?page=sync&mobilecode=generate&showsynccode=<?php echo $c['codeid']; ?>">
-                                    <i class="fas fa-qrcode"></i>
-                                </a>
-                                <a class="btn btn-danger btn-sm m-1" href="app.php?page=sync&delsynccode=<?php echo $c['codeid']; ?>">
+                                <a class="btn btn-danger btn-sm m-1" href="app.php?page=sync&delsynccode=<?php echo $c['codeid']; ?>" data-toggle="tooltip" data-placement="bottom" title="<?php $Strings->get("Revoke key"); ?>">
                                     <i class='fas fa-trash'></i>
                                 </a>
                             </div>
diff --git a/static/js/app.js b/static/js/app.js
index 14b7c2a..3c3c275 100644
--- a/static/js/app.js
+++ b/static/js/app.js
@@ -62,6 +62,8 @@ $(document).ready(function () {
             window.clearInterval(msgticker);
         });
     }
+
+    $('[data-toggle="tooltip"]').tooltip();
 });