1165b245ce
- numerous bug fixes - wtv-mail system - user account updates - viewergen alpha (experimental webtv viewer patcher on pc_service) - implement wtv-favorites with huge help from @JarHead4 - add wtv-ticket store api - Bump vm2 from 3.9.5 to 3.9.7 in /zefie_wtvp_minisrv - fix bf0app default rom - Add wtv-1800 service to wtv-1800:/noflash - handle webtvism: - allow get/post variables to be the same name multiple times - rather than overwrite, the server will now change the variable from a string to an array. - Rewrite script processing a bit - Instead of using eval() we now use a proper VM Context - As a result, any scripting errors will now give a more useful filename and line number. - However, some things may break, if they are dependant on variables we are not allowing in the context. - BREAKING CHANGES: - `ssid_sessions[socket.ssid]` is now `session_data` - `require` is no longer allowed in user scripts - add star service - change how we handle modules for services in the VM - fixed wtv-disk:/sync always failed the first time - implement production-like wtv-star handling (when a service port becomes unavailable, it requests the url over the wtv-star port to show an error page) - renamed WTVDownloadList.js to WTVDisk.js - a bit more work on WTVNews (created class) - probably more stuff I can't remember
39 lines
1.4 KiB
JavaScript
39 lines
1.4 KiB
JavaScript
var minisrv_service_file = true;
|
|
|
|
session_data.loadSessionData();
|
|
|
|
var user_id = (request_headers.query.user_id) ? request_headers.query.user_id : session_data.user_id;
|
|
|
|
// security
|
|
if (session_data.user_id != 0 && session_data.user_id != request_headers.query.user_id) {
|
|
user_id = null; // force unset
|
|
var errpage = wtvshared.doErrorPage(400, "You are not authorized to change the selected user's password.");
|
|
headers = errpage[0];
|
|
data = errpage[1];
|
|
}
|
|
|
|
if (user_id != null) {
|
|
var userSession;
|
|
if (session_data.user_id == request_headers.query.user_id) userSession = session_data;
|
|
else {
|
|
userSession = new WTVClientSessionData(minisrv_config, socket.ssid);
|
|
userSession.user_id = user_id;
|
|
}
|
|
|
|
if (!userSession.loadSessionData()) {
|
|
var errpage = wtvshared.doErrorPage(400, "Invalid user ID.");
|
|
headers = errpage[0];
|
|
data = errpage[1];
|
|
}
|
|
else {
|
|
var user_name = userSession.getSessionData('subscriber_username');
|
|
userSession.setSessionData('subscriber_name', (request_headers.query.display_name) ? request_headers.query.display_name : user_name);
|
|
userSession.saveSessionData();
|
|
headers = `300 OK
|
|
Content-type: text/html
|
|
wtv-expire: wtv-setup:/edit-user-begin?user_id=${user_id}
|
|
wtv-expire: wtv-setup:/edit-user-name?user_id=${user_id}
|
|
Location: wtv-setup:/edit-user-begin?user_id=${user_id}`;
|
|
}
|
|
}
|
|
if (userSession) userSession = null; |