mirror of
https://github.com/rejetto/hfs2.git
synced 2025-12-19 10:03:56 +01:00
no need to invalidate session in this case, it was not compromised
This commit is contained in:
parent
18f0da77d4
commit
151cddad5b
@ -594,7 +594,7 @@ z-index:1; /* without this .item-menu will be over*/ }
|
|||||||
{.if|{.length|{.set account||password={.postvar|new.}.}/length.}|ok|failed.}
|
{.if|{.length|{.set account||password={.postvar|new.}.}/length.}|ok|failed.}
|
||||||
|
|
||||||
[special:alias]
|
[special:alias]
|
||||||
check session=if|{.{.cookie|HFS_SID_.} != {.postvar|token.}.}|{:{.cookie|HFS_SID_|value=|expires=-1.} {.break|result=bad session.}:}
|
check session=break|if={.{.cookie|HFS_SID_.} != {.postvar|token.}.}|result=bad token
|
||||||
can mkdir=and|{.get|can upload.}|{.!option.newfolder.}
|
can mkdir=and|{.get|can upload.}|{.!option.newfolder.}
|
||||||
can comment=and|{.get|can upload.}|{.!option.comment.}
|
can comment=and|{.get|can upload.}|{.!option.comment.}
|
||||||
can rename=and|{.get|can delete.}|{.!option.rename.}
|
can rename=and|{.get|can delete.}|{.!option.rename.}
|
||||||
@ -789,10 +789,7 @@ function getStdAjaxCB(what2do) {
|
|||||||
if (res === "ok")
|
if (res === "ok")
|
||||||
return (typeof what2do==='function') ? what2do() : location.reload()
|
return (typeof what2do==='function') ? what2do() : location.reload()
|
||||||
showLoading(false)
|
showLoading(false)
|
||||||
showError(res, function(){
|
showError(res)
|
||||||
if (res === 'bad session')
|
|
||||||
location.reload()
|
|
||||||
})
|
|
||||||
}
|
}
|
||||||
}//getStdAjaxCB
|
}//getStdAjaxCB
|
||||||
|
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user