- web: authenticate notices request

svn path=/trunk/boinc/; revision=22397
This commit is contained in:
David Anderson 2010-09-22 22:48:15 +00:00
parent b3383c281e
commit 695eb80680
3 changed files with 15 additions and 2 deletions

View File

@ -6736,3 +6736,9 @@ David 21 Sept 2010
notices.php
client/
cs_notice.cpp,h
David 22 Sept 2010
- web: authenticate notices request
html/user/
notices.php

View File

@ -25,5 +25,5 @@ if (!$forum) {
exit;
}
forum_rss($forum->id, 0, 0, 1, 9999);
forum_rss($forum->id, 0, 0, 1, 14);
?>

View File

@ -58,7 +58,14 @@ if (!$since_time) {
$user = BoincUser::lookup_id($userid);
if (!$user) xml_error();
if (notify_rss_auth($user) != $auth) xml_error();
// the auth in the URL includes "userid_"
//
$x = $user->id."_".notify_rss_auth($user);
if ($x != $auth) {
xml_error(-155, 'Invalid authenticator');
}
$since_clause = "and create_time > $since_time";