AdamAnt/QuotesDB
1
0
Fork 0
mirror of https://github.com/Adam-Ant/QuotesDB synced 2024-12-20 11:34:35 +00:00
Code Issues Releases Wiki Activity

Add session checking on POST, prevents replay attacks and some other session weirdness

Browse Source
This commit is contained in:
Adam Dodman 2017-10-05 00:36:01 +01:00
parent 75f96f74a7
commit 517e8a5cfa
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
main.py
View File

@ -81,6 +81,11 @@ def login():
@app.route("/addquote", methods=['GET','POST']) @app.route("/addquote", methods=['GET','POST'])
def addquote(): def addquote():
if request.method == "POST": if request.method == "POST":
try:
session['username']
except KeyError:
flash("INFO: Please login first.","info")
return redirect(url_for("login"))
quotein = pymysql.escape_string(request.form['quote']) quotein = pymysql.escape_string(request.form['quote'])
contextin = pymysql.escape_string(request.form['context']) contextin = pymysql.escape_string(request.form['context'])