1
0
mirror of https://github.com/spl0k/supysonic.git synced 2024-09-20 03:11:04 +00:00

Check that username match with UUID in login

This commit is contained in:
Óscar García Amor 2017-08-07 13:14:03 +02:00
parent d9d90ffacf
commit 81c356355b

View File

@ -31,6 +31,9 @@ def login_check():
elif UserManager.get(store, session.get('userid'))[0] != UserManager.SUCCESS: elif UserManager.get(store, session.get('userid'))[0] != UserManager.SUCCESS:
session.clear() session.clear()
should_login = True should_login = True
elif UserManager.get(store, session.get('userid'))[1].name != session.get('username'):
session.clear()
should_login = True
if should_login: if should_login:
flash('Please login') flash('Please login')
@ -48,4 +51,3 @@ def index():
from .user import * from .user import *
from .folder import * from .folder import *
from .playlist import * from .playlist import *