@@ -0,0 +1,6 @@
<?php
if(empty($_POST['hash'])) exit;
$hash = substr($_POST['hash'],1);
if (is_readable('saved/'.$hash)) {
echo file_get_contents('saved/'.$hash);
}
The note is not visible to the blocked user.