From a6c06b8036573ed5db43b7f919051a8af9a62f22 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Esteban=20S=C3=A1nchez?= <estebansm85@gmail.com>
Date: Thu, 6 Aug 2026 10:41:01 +0200
Subject: [PATCH] Refactoriza la descarga de archivos de respaldo para evitar
 peticion duplicada.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Elimina el campo oculto 'file_name' del formulario en Backup.html.twig.
- Modifica los enlaces de descarga para utilizar parámetros de consulta en lugar de JavaScript.
- Actualiza la forma en que se obtiene 'file_name' en Backup.php, cambiando de 'input' a 'query'.

Estos cambios consiguen que a la hora de descargar varios archivos se genere un token nuevo y se eviten las duplicidades
---
 Controller/Backup.php |  4 ++--
 View/Backup.html.twig | 12 ++----------
 2 files changed, 4 insertions(+), 12 deletions(-)

diff --git a/Controller/Backup.php b/Controller/Backup.php
index 38700bc..bae9c23 100644
--- a/Controller/Backup.php
+++ b/Controller/Backup.php
@@ -344,7 +344,7 @@ private function downloadSqlAction(): void
 			return;
 		}
 
-		$file_name = $this->request->input('file_name', '');
+		$file_name = $this->request->query('file_name', '');
 		if (empty($file_name)) {
 			Tools::log()->warning('no-file-received');
 			return;
@@ -369,7 +369,7 @@ private function downloadZipAction(): void
 			return;
 		}
 
-		$file_name = $this->request->input('file_name', '');
+		$file_name = $this->request->query('file_name', '');
 		if (empty($file_name)) {
 			Tools::log()->warning('no-file-received');
 			return;
diff --git a/View/Backup.html.twig b/View/Backup.html.twig
index 19e8d82..15fc51b 100644
--- a/View/Backup.html.twig
+++ b/View/Backup.html.twig
@@ -47,7 +47,6 @@
 						<form action="{{ fsc.url() }}" id="f_download" method="post">
 							{{ formToken() }}
 							<input type="hidden" name="action">
-							<input type="hidden" name="file_name">
 							<div class="card shadow mb-4">
 								<div class="card-body">
 									<h2 class="h3">
@@ -102,7 +101,7 @@
 														<tr>
 															<td>
 																{% if backup.sql_file %}
-																	<a href="#" onclick="downloadBackupAction('download-sql-file','{{ backup.sql_file }}')">
+																	<a href="{{ fsc.url() }}?action=download-sql-file&amp;file_name={{ backup.sql_file }}&amp;multireqtoken={{ formToken(false) }}">
 																		<i class="fa-solid fa-database me-1"></i>
 																		{{ backup.sql_file }}
 																	</a>
@@ -119,7 +118,7 @@
 															</td>
 															<td>
 																{% if backup.zip_file %}
-																	<a href="#" onclick="downloadBackupAction('download-zip-file','{{ backup.zip_file }}')">
+																	<a href="{{ fsc.url() }}?action=download-zip-file&amp;file_name={{ backup.zip_file }}&amp;multireqtoken={{ formToken(false) }}">
 																		<i class="fa-solid fa-box-archive me-1"></i>
 																		{{ backup.zip_file }}
 																	</a>
@@ -405,13 +404,6 @@
 			form.submit();
 		}
 
-		function downloadBackupAction(action, file_name = '') {
-			let form = $('#f_download');
-			form.find('input[name="action"]').val(action);
-			form.find('input[name="file_name"]').val(file_name);
-			form.submit();
-		}
-
 		$(document).ready(function () {
 			$('#f_restore_db').on('submit', function (e) {
 			animateSpinner('add');