Public/elog
1
0
Fork 0
mirror of https://gitea.psi.ch/ELOG/elog.git synced 2026-09-12 19:06:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Check access to logbook before executing retrieve_url()

Browse Source
This commit is contained in:
ritt 2019-12-09 15:21:04 +01:00
parent 32ba07e192
commit 15787c1ede
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/elogd.c
View File

@ -28496,6 +28496,14 @@ void decode_post(char *logbook, LOGBOOK *lbs, const char *string, const char *bo
/* check for URL */ /* check for URL */
if (stristr(file_name, "http://") || stristr(file_name, "https://")) { if (stristr(file_name, "http://") || stristr(file_name, "https://")) {
// check for logbook access
if (getcfg(lbs->name, "Password file", str, sizeof(str))) {
if (!check_login(lbs, getparam("sid"))) {
return;
}
}
size = retrieve_url(lbs, file_name, stristr(file_name, "https://") != NULL, &buffer, FALSE); size = retrieve_url(lbs, file_name, stristr(file_name, "https://") != NULL, &buffer, FALSE);
if (size <= 0) { if (size <= 0) {
strencode2(str2, file_name, sizeof(str2)); strencode2(str2, file_name, sizeof(str2));