From d92242e1c9b5f5be9a642514a34ae2939a37adcf Mon Sep 17 00:00:00 2001
From: qkqpttgf <45693631+qkqpttgf@users.noreply.github.com>
Date: Fri, 18 Sep 2020 11:12:45 +0800
Subject: [PATCH] Update common.php

---
 common.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/common.php b/common.php
index 9291d38..44972dc 100644
--- a/common.php
+++ b/common.php
@@ -718,6 +718,7 @@ function spurlencode($str, $split='')
         $tmp = urlencode($str);
     }
     $tmp = str_replace('%2520', '%20',$tmp);
+    $tmp = str_replace('%26amp%3B', '&',$tmp);
     return $tmp;
 }
 
@@ -971,6 +972,7 @@ function output($body, $statusCode = 200, $headers = ['Content-Type' => 'text/ht
 
 function passhidden($path)
 {
+    if ($_SERVER['admin']) return 0;
     $path = str_replace('+','%2B',$path);
     $path = str_replace('&amp;','&', path_format(urldecode($path)));
     if (getConfig('passfile') != '') {