Rim/iw4x-client
Rim/iw4x-client
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

[Download] Hash password for url safety

Browse Source
This commit is contained in:
momo5502 2017-07-02 14:16:06 +02:00
parent 5036fb2e84
commit 9847e1a512
2 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/Components/Modules/Download.cpp
View File

@ -38,7 +38,8 @@ namespace Components
Party::ConnectError("A password is required to connect to this server!"); Party::ConnectError("A password is required to connect to this server!");
return; return;
} }
Download::CLDownload.password = pass;
Download::CLDownload.hashedPassword = Utils::Cryptography::SHA256::Compute(pass);
} }
Download::CLDownload.running = true; Download::CLDownload.running = true;
@ -230,7 +231,7 @@ namespace Components
else else
{ {
url = host + "/file/" + (download->isMap ? "map/" : "") + file.name url = host + "/file/" + (download->isMap ? "map/" : "") + file.name
+ (download->isPrivate ? ("?password=" + download->password) : ""); + (download->isPrivate ? ("?password=" + download->hashedPassword) : "");
} }
Download::FileDownload fDownload; Download::FileDownload fDownload;
@ -272,7 +273,7 @@ namespace Components
std::string host = "http://" + download->target.getString(); std::string host = "http://" + download->target.getString();
std::string listUrl = host + (download->isMap ? "/map" : "/list") + (download->isPrivate ? ("?password=" + download->password) : ""); std::string listUrl = host + (download->isMap ? "/map" : "/list") + (download->isPrivate ? ("?password=" + download->hashedPassword) : "");
std::string list = Utils::WebIO("IW4x", listUrl).setTimeout(5000)->get(); std::string list = Utils::WebIO("IW4x", listUrl).setTimeout(5000)->get();
if (list.empty()) if (list.empty())
@ -411,7 +412,7 @@ namespace Components
char buffer[128] = { 0 }; char buffer[128] = { 0 };
int passLen = mg_get_http_var(&message->query_string, "password", buffer, sizeof buffer); int passLen = mg_get_http_var(&message->query_string, "password", buffer, sizeof buffer);
if (passLen <= 0 || std::string(buffer, passLen) != g_password)//Utils::Cryptography::SHA256::Compute(g_password)) if (passLen <= 0 || std::string(buffer, passLen) != Utils::Cryptography::SHA256::Compute(g_password))
{ {
mg_printf(nc, ("HTTP/1.1 403 Forbidden\r\n"s + mg_printf(nc, ("HTTP/1.1 403 Forbidden\r\n"s +
"Content-Type: text/html\r\n"s + "Content-Type: text/html\r\n"s +

2
src/Components/Modules/Download.hpp
View File

@ -28,7 +28,7 @@ namespace Components
bool isPrivate; bool isPrivate;
mg_mgr mgr; mg_mgr mgr;
Network::Address target; Network::Address target;
std::string password; std::string hashedPassword;
std::string mod; std::string mod;
std::thread thread; std::thread thread;