Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Added luci.sauth.kill, sanitize luci.sauth even more

Browse source
This commit is contained in:
Steven Barth 2008-12-14 21:42:59 +00:00
parent f9a04e040f
commit 8b978f79fc
1 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
libs/web/luasrc/sauth.lua
View file

@ -60,6 +60,9 @@ function read(id)
if not id then if not id then
return return
end end
if not id:match("^%w+$") then
error("Session ID is not sane!")
end
clean() clean()
if not sane(sessionpath .. "/" .. id) then if not sane(sessionpath .. "/" .. id) then
return return
@ -85,6 +88,19 @@ function write(id, data)
if not sane() then if not sane() then
prepare() prepare()
end end
if not id:match("^%w+$") then
error("Session ID is not sane!")
end
luci.fs.writefile(sessionpath .. "/" .. id, data) luci.fs.writefile(sessionpath .. "/" .. id, data)
luci.fs.chmod(sessionpath .. "/" .. id, "a-rwx,u+rw") luci.fs.chmod(sessionpath .. "/" .. id, "a-rwx,u+rw")
end end
--- Kills a session
-- @param id Session identifier
function kill(id)
if not id:match("^%w+$") then
error("Session ID is not sane!")
end
luci.fs.unlink(sessionpath .. "/" .. id)
end