For old loans, the uuid is actually a text string, not a uuid.

diff --git a/BookReaderIA/www/BookReaderAuth.php b/BookReaderIA/www/BookReaderAuth.php
index 1a82afe..04f25f7 100644 (file)
--- a/BookReaderIA/www/BookReaderAuth.php
+++ b/BookReaderIA/www/BookReaderAuth.php
@@ -27,7 +27,8 @@ if (!preg_match('/^\d{10}-[0-9a-f]{32}$/', $token)) {
     fatal();
 }
 
-if (!preg_match('/^[0-9a-f]{32}$/', $uuid)) {
+//if (!preg_match('/^[0-9a-f]{32}$/', $uuid)) {
+if (!preg_match('/^\S{1,128}$/', $uuid)) {
     fatal();
 }