more optimizations, remove WTVIRC for now, upgrade test.js
This commit is contained in:
@@ -2,19 +2,19 @@ const minisrv_service_file = true;
|
||||
let userSession;
|
||||
session_data.loadSessionData();
|
||||
|
||||
let user_id = (request_headers.query.user_id) ? request_headers.query.user_id : session_data.user_id;
|
||||
let user_id = (request_headers.query.user_id) ? parseInt(request_headers.query.user_id) : session_data.user_id;
|
||||
|
||||
// security
|
||||
if (session_data.user_id != 0 && session_data.user_id != request_headers.query.user_id) {
|
||||
if (session_data.user_id !== 0 && session_data.user_id !== parseInt(request_headers.query.user_id)) {
|
||||
user_id = null; // force unset
|
||||
const errpage = wtvshared.doErrorPage(400, "You are not authorized to change the selected user's password.");
|
||||
headers = errpage[0];
|
||||
data = errpage[1];
|
||||
}
|
||||
|
||||
if (user_id != null) {
|
||||
if (user_id !== null) {
|
||||
|
||||
if (session_data.user_id == request_headers.query.user_id) userSession = session_data;
|
||||
if (session_data.user_id === parseInt(request_headers.query.user_id)) userSession = session_data;
|
||||
else {
|
||||
userSession = new WTVClientSessionData(minisrv_config, socket.ssid);
|
||||
userSession.user_id = user_id;
|
||||
@@ -35,5 +35,4 @@ wtv-expire: wtv-setup:/edit-user-begin?user_id=${user_id}
|
||||
wtv-expire: wtv-setup:/edit-user-name?user_id=${user_id}
|
||||
Location: wtv-setup:/edit-user-begin?user_id=${user_id}`;
|
||||
}
|
||||
}
|
||||
if (userSession) userSession = null;
|
||||
}
|
||||
Reference in New Issue
Block a user