Cavemanon/cavecomm
Archived
10
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

fix decode encoded request data

Browse Source
This commit is contained in:
Tina_Azure
2023-09-27 16:34:13 +02:00
parent 244c62a19d
commit 11ffdac203
1 changed files with 14 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
src/main.cpp
View File

@@ -1231,9 +1231,11 @@ int main(int argc, char *argv[]) {
([&, configuration](const crow::request& getRequest, const string& fileName) { ([&, configuration](const crow::request& getRequest, const string& fileName) {
auto& cookieCtx = app.get_context<crow::CookieParser>(getRequest); auto& cookieCtx = app.get_context<crow::CookieParser>(getRequest);
crow::mustache::context ctx; crow::mustache::context ctx;
string decodedFileName = fileName;
Utilities::decodeString(decodedFileName);
if (Utilities::checkCookieLoginState(configuration, cookieCtx)) { if (Utilities::checkCookieLoginState(configuration, cookieCtx)) {
ctx = Utilities::getFreelancerSubmissionLinks(configuration, cookieCtx.get_cookie(COOKIE_FREELANCER_EMAIL), fileName); ctx = Utilities::getFreelancerSubmissionLinks(configuration, cookieCtx.get_cookie(COOKIE_FREELANCER_EMAIL), decodedFileName);
ctx["filename"] = fileName; ctx["filename"] = decodedFileName;
ctx["domain"] = configuration.domain; ctx["domain"] = configuration.domain;
ctx[MUSTACHE_COOKIE_LOGGED_IN] = true; ctx[MUSTACHE_COOKIE_LOGGED_IN] = true;
@@ -1250,11 +1252,16 @@ int main(int argc, char *argv[]) {
auto& cookieCtx = app.get_context<crow::CookieParser>(getRequest); auto& cookieCtx = app.get_context<crow::CookieParser>(getRequest);
crow::mustache::context ctx; crow::mustache::context ctx;
if (Utilities::checkCookieLoginState(configuration, cookieCtx)) { if (Utilities::checkCookieLoginState(configuration, cookieCtx)) {
string decodedAliasName = aliasName;
Utilities::decodeString(decodedAliasName);
string decodedFileName = fileName;
Utilities::decodeString(decodedFileName);
string formatedAlias = to_string(freelancerID); string formatedAlias = to_string(freelancerID);
formatedAlias.append("/"); formatedAlias.append("/");
formatedAlias.append(aliasName); formatedAlias.append(decodedAliasName);
Utilities::deleteFreelancerSubmissionAlias(configuration, formatedAlias, fileName, cookieCtx.get_cookie(COOKIE_FREELANCER_EMAIL)); Utilities::deleteFreelancerSubmissionAlias(configuration, formatedAlias, decodedFileName, cookieCtx.get_cookie(COOKIE_FREELANCER_EMAIL));
ctx["filename"] = fileName; ctx["filename"] = decodedFileName;
ctx[MUSTACHE_COOKIE_LOGGED_IN] = true; ctx[MUSTACHE_COOKIE_LOGGED_IN] = true;
} }
auto page = crow::mustache::load(TEMPLATE_FREELANCER_SUBMISSION_MANAGEMENT_VIEW_LINK_DELETE_FULFILMENT); auto page = crow::mustache::load(TEMPLATE_FREELANCER_SUBMISSION_MANAGEMENT_VIEW_LINK_DELETE_FULFILMENT);
@@ -1358,8 +1365,9 @@ int main(int argc, char *argv[]) {
aliasName.append(alias); aliasName.append(alias);
ctx["submissionLink"] = configuration.domain + "/commissionSubmission/" + aliasName; ctx["submissionLink"] = configuration.domain + "/commissionSubmission/" + aliasName;
string decodedFileName = fileName; string decodedFileName = fileName;
Utilities::replaceString(decodedFileName, "+", " ");
Utilities::decodeString(decodedFileName); Utilities::decodeString(decodedFileName);
if(Database::executePreparedStatement_INSERT_FREELANCER_FILE_SUBMISSION_ALIAS(databaseConnection, stoi(freelancerID), fileName, aliasName) > 0) if(Database::executePreparedStatement_INSERT_FREELANCER_FILE_SUBMISSION_ALIAS(databaseConnection, stoi(freelancerID), decodedFileName, aliasName) > 0)
ctx[MUSTACHE_FREELANCER_SUBMISSION_ALIAS_ERROR_INVALID] = true; ctx[MUSTACHE_FREELANCER_SUBMISSION_ALIAS_ERROR_INVALID] = true;
} }
else { else {