Public/elog
1
0
Fork 0
mirror of https://gitea.psi.ch/ELOG/elog.git synced 2026-09-10 18:23:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Only store allowed cookies

Browse Source 
SVN revision: 2162
This commit is contained in:
Stefan Ritt 2009-01-21 07:39:57 +00:00
parent eb4fda4ecd
commit 8b4cd7fb71
1 changed files with 21 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
src/elogd.c
View File

@ -11221,7 +11221,10 @@ void show_edit_form(LOGBOOK * lbs, int message_id, BOOL breply, BOOL bedit, BOOL
/* ImageMagick available, so get image size */ /* ImageMagick available, so get image size */
rsprintf("<b>%s</b>&nbsp;\n", att[index] + 14); rsprintf("<b>%s</b>&nbsp;\n", att[index] + 14);
sprintf(cmd, "identify -format '%%wx%%h' '%s'", file_name); if (chkext(file_name, ".pdf") || chkext(file_name, ".ps"))
sprintf(cmd, "identify -format '%%wx%%h' '%s[0]'", file_name);
else
sprintf(cmd, "identify -format '%%wx%%h' '%s'", file_name);
#ifdef OS_WINNT #ifdef OS_WINNT
for (i = 0; i < (int) strlen(cmd); i++) for (i = 0; i < (int) strlen(cmd); i++)
if (cmd[i] == '\'') if (cmd[i] == '\'')
@ -26568,6 +26571,10 @@ int process_http_request(const char *request, int i_conn)
time_t now; time_t now;
struct tm *ts; struct tm *ts;
const char *cookie_list[] =
{"upwd", "unm", "elmode", "urem", "wpwd", "apwd", "uname", "upassword", "elattach", "hsm", NULL};
if (!strchr(request, '\r')) if (!strchr(request, '\r'))
return 0; return 0;
@ -26601,8 +26608,9 @@ int process_http_request(const char *request, int i_conn)
if (str[i] == '=') { if (str[i] == '=') {
str[i] = 0; str[i] = 0;
p += i + 1; p += i + 1;
for (i = 0; *p && *p != ';' && *p != '\r' && *p != '\n' && i < (int) sizeof(cookie)-1; i++) for (i = 0; *p && *p != ';' && *p != '\r' && *p != '\n' ; )
cookie[i] = *p++; if (i < (int) sizeof(cookie)-1)
cookie[i++] = *p++;
cookie[i] = 0; cookie[i] = 0;
} else { } else {
/* empty cookie */ /* empty cookie */
@ -26612,7 +26620,16 @@ int process_http_request(const char *request, int i_conn)
} }
/* store cookie as parameter */ /* store cookie as parameter */
setparam(str, cookie); for(i=0; cookie_list[i]; i++) {
if(strcmp(cookie_list[i], str) == 0) {
setparam(str, cookie);
break;
}
}
if (cookie_list[i] == NULL)
printf("Received unknown cookie \"%s\"\n", str);
} while (*p && *p == ';'); } while (*p && *p == ';');
} }