Author: a_horuzhenko
Date: Tue Jul  2 10:32:40 2013
New Revision: 1498870

URL: http://svn.apache.org/r1498870
Log:
SID checking has been added to the remote log.

Modified:
    openmeetings/branches/2.1/WebContent/src/base/mainMethods.lzx
    
openmeetings/branches/2.1/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java

Modified: openmeetings/branches/2.1/WebContent/src/base/mainMethods.lzx
URL: 
http://svn.apache.org/viewvc/openmeetings/branches/2.1/WebContent/src/base/mainMethods.lzx?rev=1498870&r1=1498869&r2=1498870&view=diff
==============================================================================
--- openmeetings/branches/2.1/WebContent/src/base/mainMethods.lzx (original)
+++ openmeetings/branches/2.1/WebContent/src/base/mainMethods.lzx Tue Jul  2 
10:32:40 2013
@@ -120,6 +120,7 @@
        remoteLog.setQueryType("POST");
        remoteLog.setAttribute("src", canvas.getUrl() + "/remotelog.upload");
        remoteLog.setQueryParam("message", message);
+       remoteLog.setQueryParam("sid", canvas.sessionId);
        remoteLog.doRequest();
     </method>
     

Modified: 
openmeetings/branches/2.1/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java
URL: 
http://svn.apache.org/viewvc/openmeetings/branches/2.1/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java?rev=1498870&r1=1498869&r2=1498870&view=diff
==============================================================================
--- 
openmeetings/branches/2.1/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java
 (original)
+++ 
openmeetings/branches/2.1/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java
 Tue Jul  2 10:32:40 2013
@@ -139,7 +139,10 @@ public class UploadController extends Ab
     @RequestMapping(value = "/remotelog.upload", method = RequestMethod.POST)
     public void handleRemoteLog(HttpServletRequest request, 
HttpServletResponse response) throws ServletException {
        String message = request.getParameter("message");
-       if (message != null) {
+       String sid = request.getParameter("sid");
+       if (sid == null || message == null) return;
+       Long userId = sessiondataDao.checkSession(sid);
+       if (userId != null && userId != 0) {
                log.debug("[CLIENT MESSAGE] " + message);
        }
     }


Reply via email to