skorotkiewicz/rDrama
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fsdfds

Browse source
This commit is contained in:
Aevann1 2021-12-19 04:37:18 +02:00
parent 76ac241d51
commit 261156ff9a
3 changed files with 14 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

8
files/helpers/const.py
View file

@ -129,7 +129,9 @@ if 'rdrama.net' in SITE:
DAD_ID = 2513 DAD_ID = 2513
MOM_ID = 4588 MOM_ID = 4588
DONGER_ID = 541 DONGER_ID = 541
FARTBINN_ID = 2256 FARTBINN_ID = 2256
PW1_ID = 3750
PW2_ID = 7626
BUG_THREAD = 29748 BUG_THREAD = 29748
EMOJI_THREAD = 16583 EMOJI_THREAD = 16583
elif SITE == "pcmemes.net": elif SITE == "pcmemes.net":
@ -155,6 +157,8 @@ elif SITE == "pcmemes.net":
MOM_ID = 0 MOM_ID = 0
DONGER_ID = 0 DONGER_ID = 0
FARTBINN_ID = 0 FARTBINN_ID = 0
PW1_ID = 0
PW2_ID = 0
BUG_THREAD = 4103 BUG_THREAD = 4103
EMOJI_THREAD = 0 EMOJI_THREAD = 0
else: else:
@ -180,6 +184,8 @@ else:
MOM_ID = 0 MOM_ID = 0
DONGER_ID = 0 DONGER_ID = 0
FARTBINN_ID = 0 FARTBINN_ID = 0
PW1_ID = 0
PW2_ID = 0
BUG_THREAD = 0 BUG_THREAD = 0
EMOJI_THREAD = 0 EMOJI_THREAD = 0

7
files/routes/login.py
View file

@ -137,7 +137,7 @@ def login_post():
session["login_nonce"] = account.login_nonce session["login_nonce"] = account.login_nonce
session.permanent = True session.permanent = True
check_for_alts(account.id) if user_id not in (PW1_ID,PW2_ID): check_for_alts(account.id)
redir = request.values.get("redirect", "/").replace("/logged_out", "").strip() redir = request.values.get("redirect", "/").replace("/logged_out", "").strip()
@ -440,10 +440,11 @@ def get_reset():
@limiter.limit("1/second") @limiter.limit("1/second")
@auth_desired @auth_desired
def post_reset(v): def post_reset(v):
if v: if v: return redirect('/')
return redirect('/')
user_id = request.values.get("user_id") user_id = request.values.get("user_id")
if user_id in (PW1_ID,PW2_ID): abort(403)
timestamp = int(request.values.get("time")) timestamp = int(request.values.get("time"))
token = request.values.get("token") token = request.values.get("token")

4
files/routes/settings.py
View file

@ -546,7 +546,7 @@ def verifiedcolor(v):
@auth_required @auth_required
@validate_formkey @validate_formkey
def settings_security_post(v): def settings_security_post(v):
if request.values.get("new_password"): if request.values.get("new_password") and user_id not in (PW1_ID,PW2_ID):
if request.values.get( if request.values.get(
"new_password") != request.values.get("cnf_password"): "new_password") != request.values.get("cnf_password"):
return redirect("/settings/security?error=" + return redirect("/settings/security?error=" +
@ -657,6 +657,8 @@ def settings_security_post(v):
@validate_formkey @validate_formkey
def settings_log_out_others(v): def settings_log_out_others(v):
if user_id in (PW1_ID,PW2_ID): abort(403)
submitted_password = request.values.get("password", "").strip() submitted_password = request.values.get("password", "").strip()
if not v.verifyPass(submitted_password): if not v.verifyPass(submitted_password):