changed the algorithm how sessions work:

- if the IP is banned or there is no a winix function then we set a temporary session
- else
  if there is a session's cookie sent by the client then:
   - if the cookie is a correct session's cookie then we set the session from the cookie
   - or if the cookie is not a correct session's cookie (e.g. session expired) and the winix function
     requires a cookie then we set a new session
   - or if there is no cookie sent then if a winix function requires a session we create a new session

  if there was an error creating a new session or event counters reach a ban limit then a temporary session will be used





git-svn-id: svn://ttmath.org/publicrep/winix/trunk@1115 e52654a7-88a9-db11-a3e9-0013d4bc506e
This commit is contained in:
2018-06-20 15:00:02 +00:00
parent 35b93b1655
commit 08123fe6ac
9 changed files with 78 additions and 40 deletions

View File

@@ -408,9 +408,9 @@ void App::ProcessRequestThrow()
if( !cur.request->dir_tab.empty() )
{
functions.CheckFunctionAndSymlink(); // CHECK ME it is correct now?
functions.CheckFunctionAndSymlink();
session_manager.SetSession();
session_manager.PrepareSession();
cur.session = session_manager.GetCurSession();
SetLocale();
@@ -451,6 +451,10 @@ void App::ProcessRequestThrow()
cur.request->dir_tab.push_back(root_dir);
cur.request->last_item = cur.request->dir_tab.back();
}
else
{
log << log1 << "App: oops, we do not have a root dir" << logend;
}
}
cur.mount = system.mounts.CalcCurMount();