Author: a_horuzhenko
Date: Tue Jul  2 10:34:35 2013
New Revision: 1498872

URL: http://svn.apache.org/r1498872
Log:
SID checking has been added to the remote log.

Modified:
    openmeetings/trunk/singlewebapp/WebContent/src/base/mainMethods.lzx
    
openmeetings/trunk/singlewebapp/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java

Modified: openmeetings/trunk/singlewebapp/WebContent/src/base/mainMethods.lzx
URL: 
http://svn.apache.org/viewvc/openmeetings/trunk/singlewebapp/WebContent/src/base/mainMethods.lzx?rev=1498872&r1=1498871&r2=1498872&view=diff
==============================================================================
--- openmeetings/trunk/singlewebapp/WebContent/src/base/mainMethods.lzx 
(original)
+++ openmeetings/trunk/singlewebapp/WebContent/src/base/mainMethods.lzx Tue Jul 
 2 10:34:35 2013
@@ -120,6 +120,7 @@
        remoteLog.setQueryType("POST");
        remoteLog.setAttribute("src", canvas.getUrl() + "remotelog.upload");
        remoteLog.setQueryParam("message", message);
+       remoteLog.setQueryParam("sid", canvas.sessionId);
        remoteLog.doRequest();
     </method>
     

Modified: 
openmeetings/trunk/singlewebapp/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java
URL: 
http://svn.apache.org/viewvc/openmeetings/trunk/singlewebapp/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java?rev=1498872&r1=1498871&r2=1498872&view=diff
==============================================================================
--- 
openmeetings/trunk/singlewebapp/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java
 (original)
+++ 
openmeetings/trunk/singlewebapp/src/org/apache/openmeetings/servlet/outputhandler/UploadController.java
 Tue Jul  2 10:34:35 2013
@@ -144,7 +144,10 @@ public class UploadController extends Ab
     @RequestMapping(value = "/remotelog.upload", method = RequestMethod.POST)
     public void handleRemoteLog(HttpServletRequest request, 
HttpServletResponse response) throws ServletException {
        String message = request.getParameter("message");
-       if (message != null) {
+       String sid = request.getParameter("sid");
+       if (sid == null || message == null) return;
+       Long userId = sessiondataDao.checkSession(sid);
+       if (userId != null && userId != 0) {
                log.debug("[CLIENT MESSAGE] " + message);
        }
     }


Reply via email to