jeirmeister/Cockatrice
1
0
Fork 0
mirror of https://github.com/Cockatrice/Cockatrice.git synced 2026-07-14 22:42:14 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

check hash before checking if user already has access

Browse source
This commit is contained in:
RickyRister 2025-08-19 22:21:29 -07:00
parent 88052f1b06
commit a02e89e36b
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
servatrice/src/serversocketinterface.cpp
View file

@ -834,6 +834,11 @@ Response::ResponseCode AbstractServerSocketInterface::cmdReplaySubmitCode(const
const auto &replayName = replayExistsQuery->value(0).toString(); const auto &replayName = replayExistsQuery->value(0).toString();
// Check if hash is correct
if (hash != createHashForReplay(gameId.toInt())) {
return Response::RespNameNotFound;
}
// Determine if user already has access to replay // Determine if user already has access to replay
auto *alreadyAccessQuery = sqlInterface->prepareQuery( auto *alreadyAccessQuery = sqlInterface->prepareQuery(
"select 1 from {prefix}_replays_access where id_game = :id_game and id_player = :id_player"); "select 1 from {prefix}_replays_access where id_game = :id_game and id_player = :id_player");
@ -846,11 +851,6 @@ Response::ResponseCode AbstractServerSocketInterface::cmdReplaySubmitCode(const
return Response::RespOk; return Response::RespOk;
} }
// Check if hash is correct
if (hash != createHashForReplay(gameId.toInt())) {
return Response::RespNameNotFound;
}
// Grant the User access to the replay // Grant the User access to the replay
auto *grantReplayAccessQuery = auto *grantReplayAccessQuery =
sqlInterface->prepareQuery("insert into {prefix}_replays_access (id_game, id_player, replay_name, do_not_hide) " sqlInterface->prepareQuery("insert into {prefix}_replays_access (id_game, id_player, replay_name, do_not_hide) "