VAR/VAR.WebFormsCore
1
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Chat: User suplantation protection.

Browse Source
This commit is contained in:
Valeriano A.R.
2015-06-07 14:32:22 +02:00
parent 968fba8082
commit de37b36c10
3 changed files with 25 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
Scrummer/Code/Controls/ChatHandler.cs
View File

@@ -28,7 +28,7 @@ namespace Scrummer.Code
{
if (context.Request.RequestType == "GET")
{
ProcessRevicer(context);
ProcessReciver(context);
}
if (context.Request.RequestType == "POST")
{
@@ -40,7 +40,7 @@ namespace Scrummer.Code
#region Private methods
private void ProcessRevicer(HttpContext context)
private void ProcessReciver(HttpContext context)
{
int idBoard = Convert.ToInt32(GetRequestParm(context, "IDBoard"));
int idMessage = Convert.ToInt32(GetRequestParm(context, "IDMessage"));
@@ -88,6 +88,12 @@ namespace Scrummer.Code
string strIDBoard = GetRequestParm(context, "IDBoard");
int idBoard = Convert.ToInt32(string.IsNullOrEmpty(strIDBoard) ? "0" : strIDBoard);
string userName = Convert.ToString(GetRequestParm(context, "UserName"));
Session session = Sessions.Current.Session_GetCurrent(context);
if (session.UserName.ToLower() != userName.ToLower())
{
ResponseObject(context, new OperationStatus { IsOK = false, Message = "User mismatch" });
return;
}
lock (_chatBoards)
{
@@ -104,6 +110,7 @@ namespace Scrummer.Code
messageBoard.Message_Add(userName, text);
lock (_monitor) { Monitor.PulseAll(_monitor); }
}
ResponseObject(context, new OperationStatus { IsOK = true, Message = "Message sent" });
}
private string GetRequestParm(HttpContext context, string parm)
@@ -122,7 +129,8 @@ namespace Scrummer.Code
{
var jsonWritter = new JSONWriter(true);
context.Response.ContentType = "text/json";
context.Response.Write(jsonWritter.Write(obj));
string strObject = jsonWritter.Write(obj);
context.Response.Write(strObject);
}
#endregion

13
Scrummer/Code/Entities/OperationStatus.cs Normal file
View File

@@ -0,0 +1,13 @@
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
namespace Scrummer.Code.Entities
{
public class OperationStatus
{
public bool IsOK { get; set; }
public string Message { get; set; }
}
}

1
Scrummer/Scrummer.csproj
View File

@@ -78,6 +78,7 @@
<Compile Include="Code\Controls\IValidableControl.cs" />
<Compile Include="Code\CryptoUtils.cs" />
<Compile Include="Code\Entities\Message.cs" />
<Compile Include="Code\Entities\OperationStatus.cs" />
<Compile Include="Code\Entities\Session.cs" />
<Compile Include="Code\Entities\User.cs" />
<Compile Include="Code\GlobalErrorHandler.cs" />