diff options
| author | Arturo FilastoĢ <hellais@torproject.org> | 2011-08-19 16:03:50 +0200 |
|---|---|---|
| committer | Arturo FilastoĢ <hellais@torproject.org> | 2011-08-19 16:03:50 +0200 |
| commit | 107256ba90d51bd5c981cf0b167f68c8f64d652c (patch) | |
| tree | 77c0b3e256d5a39e77a53dc98dbfb40b30c91265 | |
| parent | 2ec2f16558d474ba517d9a2ce337a79c3be55a9d (diff) | |
| download | torouter-107256ba90d51bd5c981cf0b167f68c8f64d652c.tar.gz torouter-107256ba90d51bd5c981cf0b167f68c8f64d652c.zip | |
Fix XSRF
| -rw-r--r-- | packages/torouter-web/src/tui/controllers/tor.py | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/packages/torouter-web/src/tui/controllers/tor.py b/packages/torouter-web/src/tui/controllers/tor.py index bc66623..491c6b7 100644 --- a/packages/torouter-web/src/tui/controllers/tor.py +++ b/packages/torouter-web/src/tui/controllers/tor.py @@ -37,10 +37,13 @@ class torrc: return render.base(render.torconfig(output)) def POST(self): - self.update_config(web.input()) - trc = parsing.torrc(config.torrc_file) - trc.parse() - output = trc.html_output() - return render.base(render.torstatus(output,config.torrc_file)) + if session.is_logged() > 0: + self.update_config(web.input()) + trc = parsing.torrc(config.torrc_file) + trc.parse() + output = trc.html_output() + return render.base(render.torstatus(output,config.torrc_file)) + else: + return render.base(render.login()) |