- web: authenticate notices request

svn path=/trunk/boinc/; revision=22397
This commit is contained in:
David Anderson 2010-09-22 22:48:15 +00:00
parent b3383c281e
commit 695eb80680
3 changed files with 15 additions and 2 deletions

View File

@ -6736,3 +6736,9 @@ David 21 Sept 2010
notices.php notices.php
client/ client/
cs_notice.cpp,h cs_notice.cpp,h
David 22 Sept 2010
- web: authenticate notices request
html/user/
notices.php

View File

@ -25,5 +25,5 @@ if (!$forum) {
exit; exit;
} }
forum_rss($forum->id, 0, 0, 1, 9999); forum_rss($forum->id, 0, 0, 1, 14);
?> ?>

View File

@ -58,7 +58,14 @@ if (!$since_time) {
$user = BoincUser::lookup_id($userid); $user = BoincUser::lookup_id($userid);
if (!$user) xml_error(); if (!$user) xml_error();
if (notify_rss_auth($user) != $auth) xml_error();
// the auth in the URL includes "userid_"
//
$x = $user->id."_".notify_rss_auth($user);
if ($x != $auth) {
xml_error(-155, 'Invalid authenticator');
}
$since_clause = "and create_time > $since_time"; $since_clause = "and create_time > $since_time";