version 1.1, 2002/07/27 18:48:19
|
version 1.2, 2002/07/27 19:06:41
|
Line 30
|
Line 30
|
package Apache::lontokacc; |
package Apache::lontokacc; |
|
|
use strict; |
use strict; |
use Apache::Constants qw(:common :remotehost); |
use Apache::Constants qw(:common); |
use Apache::lonnet(); |
use Apache::lonnet(); |
use Apache::loncommon(); |
use Apache::loncommon(); |
|
|
sub handler { |
sub handler { |
my $r = shift; |
my $r = shift; |
&Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'}, |
&Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'}, |
['token','server']); |
['token','server']); |
|
my $tmpinfo='no_token'; |
if (($ENV{'form.token'}) || ($ENV{'form.server'})) { |
if (($ENV{'form.token'}) || ($ENV{'form.server'})) { |
my $tmpinfo=Apache::lonnet::reply('tmpget:'.$ENV{'form.token'}, |
$tmpinfo=&Apache::lonnet::unescape( |
$ENV{'form.server'}); |
&Apache::lonnet::reply('tmpget:'.$ENV{'form.token'}, |
|
$ENV{'form.server'})); |
if ($tmpinfo eq $r->uri) { |
if ($tmpinfo eq $r->uri) { |
return OK; |
return OK; |
} |
} |
} |
} |
$r->log_reason("Invalid token-based access",$r->filename); |
$r->log_reason("Invalid token-based access ".$r->uri.' '.$tmpinfo, |
|
$r->filename); |
return FORBIDDEN; |
return FORBIDDEN; |
} |
} |
|
|