changed: we should use SSL connection for such functions as:

adduser, login


git-svn-id: svn://ttmath.org/publicrep/winix/trunk@766 e52654a7-88a9-db11-a3e9-0013d4bc506e
This commit is contained in:
2011-09-14 09:56:00 +00:00
parent 39923d6617
commit f113e2ef31
7 changed files with 97 additions and 16 deletions

View File

@@ -60,6 +60,7 @@ App::App()
system.SetCur(&cur);
system.SetDb(&db);
system.SetSynchro(&synchro);
system.SetFunctions(&functions);
templates.SetConfig(&config);
templates.SetCur(&cur);
@@ -199,6 +200,22 @@ return true;
}
bool App::ShouldChangeToSSL()
{
if( !config.use_ssl || cur.request->using_ssl )
return false;
if( cur.request->function == &functions.fun_login ||
cur.request->function == &functions.fun_adduser )
return true;
if( config.use_ssl_only_for_logged_users && !cur.session->puser )
return false;
return true;
}
void App::ProcessRequestThrow()
{
ReadRequest();
@@ -218,15 +235,15 @@ void App::ProcessRequestThrow()
}
plugin.Call(WINIX_SESSION_CHANGED);
functions.Parse(); // parsing directories,files,functions and parameters
if( (config.use_ssl && (!config.use_ssl_only_for_logged_users || cur.session->puser)) && !cur.request->using_ssl )
if( ShouldChangeToSSL() )
{
BaseUrlRedirect(303);
log << log3 << "App: BaseUrlRedirect from: " << cur.request->env_http_host << " to SSL connection" << logend;
log << log3 << "App: this operation should be used in SSL connection" << logend;
}
else
{
functions.Parse(); // parsing directories,files,functions and parameters
cur.mount = system.mounts.CalcCurMount();
if( system.mounts.pmount->type != system.mounts.MountTypeStatic() )