changed: we should use SSL connection for such functions as:
adduser, login git-svn-id: svn://ttmath.org/publicrep/winix/trunk@766 e52654a7-88a9-db11-a3e9-0013d4bc506e
This commit is contained in:
23
core/app.cpp
23
core/app.cpp
@@ -60,6 +60,7 @@ App::App()
|
||||
system.SetCur(&cur);
|
||||
system.SetDb(&db);
|
||||
system.SetSynchro(&synchro);
|
||||
system.SetFunctions(&functions);
|
||||
|
||||
templates.SetConfig(&config);
|
||||
templates.SetCur(&cur);
|
||||
@@ -199,6 +200,22 @@ return true;
|
||||
}
|
||||
|
||||
|
||||
bool App::ShouldChangeToSSL()
|
||||
{
|
||||
if( !config.use_ssl || cur.request->using_ssl )
|
||||
return false;
|
||||
|
||||
if( cur.request->function == &functions.fun_login ||
|
||||
cur.request->function == &functions.fun_adduser )
|
||||
return true;
|
||||
|
||||
if( config.use_ssl_only_for_logged_users && !cur.session->puser )
|
||||
return false;
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
|
||||
void App::ProcessRequestThrow()
|
||||
{
|
||||
ReadRequest();
|
||||
@@ -218,15 +235,15 @@ void App::ProcessRequestThrow()
|
||||
}
|
||||
|
||||
plugin.Call(WINIX_SESSION_CHANGED);
|
||||
functions.Parse(); // parsing directories,files,functions and parameters
|
||||
|
||||
if( (config.use_ssl && (!config.use_ssl_only_for_logged_users || cur.session->puser)) && !cur.request->using_ssl )
|
||||
if( ShouldChangeToSSL() )
|
||||
{
|
||||
BaseUrlRedirect(303);
|
||||
log << log3 << "App: BaseUrlRedirect from: " << cur.request->env_http_host << " to SSL connection" << logend;
|
||||
log << log3 << "App: this operation should be used in SSL connection" << logend;
|
||||
}
|
||||
else
|
||||
{
|
||||
functions.Parse(); // parsing directories,files,functions and parameters
|
||||
cur.mount = system.mounts.CalcCurMount();
|
||||
|
||||
if( system.mounts.pmount->type != system.mounts.MountTypeStatic() )
|
||||
|
Reference in New Issue
Block a user