Author: a_horuzhenko
Date: Tue Jul 2 10:32:40 2013
New Revision: 1498870
URL: http://svn.apache.org/r1498870
Log:
SID checking has been added to the remote log.
Modified:
openmeetings/branches/2.1/WebContent/src/base/mainMethods.lzx
openmeetings/branches/2.1/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java
Modified: openmeetings/branches/2.1/WebContent/src/base/mainMethods.lzx
URL:
http://svn.apache.org/viewvc/openmeetings/branches/2.1/WebContent/src/base/mainMethods.lzx?rev=1498870&r1=1498869&r2=1498870&view=diff
==============================================================================
--- openmeetings/branches/2.1/WebContent/src/base/mainMethods.lzx (original)
+++ openmeetings/branches/2.1/WebContent/src/base/mainMethods.lzx Tue Jul 2
10:32:40 2013
@@ -120,6 +120,7 @@
remoteLog.setQueryType("POST");
remoteLog.setAttribute("src", canvas.getUrl() + "/remotelog.upload");
remoteLog.setQueryParam("message", message);
+ remoteLog.setQueryParam("sid", canvas.sessionId);
remoteLog.doRequest();
</method>
Modified:
openmeetings/branches/2.1/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java
URL:
http://svn.apache.org/viewvc/openmeetings/branches/2.1/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java?rev=1498870&r1=1498869&r2=1498870&view=diff
==============================================================================
---
openmeetings/branches/2.1/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java
(original)
+++
openmeetings/branches/2.1/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java
Tue Jul 2 10:32:40 2013
@@ -139,7 +139,10 @@ public class UploadController extends Ab
@RequestMapping(value = "/remotelog.upload", method = RequestMethod.POST)
public void handleRemoteLog(HttpServletRequest request,
HttpServletResponse response) throws ServletException {
String message = request.getParameter("message");
- if (message != null) {
+ String sid = request.getParameter("sid");
+ if (sid == null || message == null) return;
+ Long userId = sessiondataDao.checkSession(sid);
+ if (userId != null && userId != 0) {
log.debug("[CLIENT MESSAGE] " + message);
}
}