Design/EasySoft-ZenTaoPMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 30 Wiki Activity

* check timestamp for check entry token.

Browse Source
This commit is contained in:
wangyidong
2019-09-25 15:00:08 +08:00
parent 8dfe360c5c
commit 54eaa0d545
6 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
module/common/model.php
+6 -2
View File
@@ -1750,11 +1750,15 @@ EOD;
/* Change for task #5384. */
if(isset($queryString['time']))
{
$timestamp = $queryString['time'];
if(strlen($timestamp) > 10) $timestamp = substr($timestamp, 0, 10);
if(strlen($timestamp) != 10 or $timestamp{0} >= '4') $this->response('ERROR_TIMESTAMP');
$result = $this->get->token == md5($entry->code . $entry->key . $queryString['time']);
if($result)
{
if($queryString['time'] <= $entry->calledTime) $this->response('CALLED_TIME');
$this->loadModel('entry')->updateTime($entry->code, $queryString['time']);
if($timestamp <= $entry->calledTime) $this->response('CALLED_TIME');
$this->loadModel('entry')->updateTime($entry->code, $timestamp);
unset($_GET['time']);
return $result;
}