baoshuo/S2OJ
baoshuo/S2OJ
1
1
Fork 0
mirror of https://github.com/renbaoshuo/S2OJ.git synced 2024-11-22 07:38:42 +00:00
Code Issues Actions Packages Releases Activity

feat(web): throw 403 when need login

Browse Source
This commit is contained in:
Baoshuo Ren 2022-04-02 18:01:26 +08:00
parent 0af24b52ac
commit 1021dae8c0
Signed by: baoshuo
GPG Key ID: 00CB9680AB29F51A
32 changed files with 35 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
web/app/controllers/add_contest.php
View File

@ -1,6 +1,6 @@
<?php <?php
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
requirePHPLib('form'); requirePHPLib('form');

2
web/app/controllers/announcements.php
View File

@ -1,6 +1,6 @@
<?php <?php
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
requirePHPLib('form'); requirePHPLib('form');

2
web/app/controllers/blog_show.php
View File

@ -1,6 +1,6 @@
<?php <?php
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($blog = queryBlog($_GET['id']))) { if (!validateUInt($_GET['id']) || !($blog = queryBlog($_GET['id']))) {

2
web/app/controllers/blogs.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
function echoBlogCell($blog) { function echoBlogCell($blog) {

2
web/app/controllers/contest_inside.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($contest = queryContest($_GET['id']))) { if (!validateUInt($_GET['id']) || !($contest = queryContest($_GET['id']))) {

2
web/app/controllers/contest_manage.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($contest = queryContest($_GET['id']))) { if (!validateUInt($_GET['id']) || !($contest = queryContest($_GET['id']))) {

2
web/app/controllers/contest_members.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($contest = queryContest($_GET['id']))) { if (!validateUInt($_GET['id']) || !($contest = queryContest($_GET['id']))) {

2
web/app/controllers/contests.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
$upcoming_contest_name = null; $upcoming_contest_name = null;

2
web/app/controllers/download.php
View File

@ -2,7 +2,7 @@
requirePHPLib('judger'); requirePHPLib('judger');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
switch ($_GET['type']) { switch ($_GET['type']) {

2
web/app/controllers/faq.php
View File

@ -3,7 +3,7 @@
requireLib('mathjax'); requireLib('mathjax');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
echoUOJPageHeader(UOJLocale::get('help')); echoUOJPageHeader(UOJLocale::get('help'));

2
web/app/controllers/hack.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($hack = queryHack($_GET['id']))) { if (!validateUInt($_GET['id']) || !($hack = queryHack($_GET['id']))) {

2
web/app/controllers/hack_list.php
View File

@ -1,6 +1,6 @@
<?php <?php
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
$conds = array(); $conds = array();

2
web/app/controllers/problem.php
View File

@ -3,7 +3,7 @@
requirePHPLib('judger'); requirePHPLib('judger');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($problem = queryProblemBrief($_GET['id']))) { if (!validateUInt($_GET['id']) || !($problem = queryProblemBrief($_GET['id']))) {

2
web/app/controllers/problem_data_manage.php
View File

@ -4,7 +4,7 @@
requirePHPLib('data'); requirePHPLib('data');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($problem = queryProblemBrief($_GET['id']))) { if (!validateUInt($_GET['id']) || !($problem = queryProblemBrief($_GET['id']))) {

2
web/app/controllers/problem_managers_manage.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($problem = queryProblemBrief($_GET['id']))) { if (!validateUInt($_GET['id']) || !($problem = queryProblemBrief($_GET['id']))) {

2
web/app/controllers/problem_set.php
View File

@ -4,7 +4,7 @@
requirePHPLib('data'); requirePHPLib('data');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (isSuperUser($myUser) || isProblemManager($myUser) || isProblemUploader($myUser)) { if (isSuperUser($myUser) || isProblemManager($myUser) || isProblemUploader($myUser)) {

2
web/app/controllers/problem_statement_manage.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($problem = queryProblemBrief($_GET['id']))) { if (!validateUInt($_GET['id']) || !($problem = queryProblemBrief($_GET['id']))) {

2
web/app/controllers/problem_statistics.php
View File

@ -1,6 +1,6 @@
<?php <?php
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($problem = queryProblemBrief($_GET['id']))) { if (!validateUInt($_GET['id']) || !($problem = queryProblemBrief($_GET['id']))) {

2
web/app/controllers/ranklist.php
View File

@ -1,6 +1,6 @@
<?php <?php
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (isset($_GET['type']) && $_GET['type'] == 'accepted') { if (isset($_GET['type']) && $_GET['type'] == 'accepted') {

2
web/app/controllers/subdomain/blog/aboutme.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
?> ?>
<?php echoUOJPageHeader('关于我') ?> <?php echoUOJPageHeader('关于我') ?>

2
web/app/controllers/subdomain/blog/archive.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
$blogs_cond = "poster = '".UOJContext::userid()."'"; $blogs_cond = "poster = '".UOJContext::userid()."'";

2
web/app/controllers/subdomain/blog/blog.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!isset($_GET['id']) || !validateUInt($_GET['id']) || !($blog = queryBlog($_GET['id'])) || !UOJContext::isHis($blog)) { if (!isset($_GET['id']) || !validateUInt($_GET['id']) || !($blog = queryBlog($_GET['id'])) || !UOJContext::isHis($blog)) {

2
web/app/controllers/subdomain/blog/blog_delete.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!UOJContext::hasBlogPermission()) { if (!UOJContext::hasBlogPermission()) {

2
web/app/controllers/subdomain/blog/blog_write.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!UOJContext::hasBlogPermission()) { if (!UOJContext::hasBlogPermission()) {

2
web/app/controllers/subdomain/blog/index.php
View File

@ -1,6 +1,6 @@
<?php <?php
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
$blogs_pag = new Paginator(array( $blogs_pag = new Paginator(array(

2
web/app/controllers/subdomain/blog/slide.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!isset($_GET['id']) || !validateUInt($_GET['id']) || !($blog = queryBlog($_GET['id'])) || !UOJContext::isHisSlide($blog)) { if (!isset($_GET['id']) || !validateUInt($_GET['id']) || !($blog = queryBlog($_GET['id'])) || !UOJContext::isHisSlide($blog)) {

2
web/app/controllers/subdomain/blog/slide_write.php
View File

@ -2,7 +2,7 @@
requirePHPLib('form'); requirePHPLib('form');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!UOJContext::hasBlogPermission()) { if (!UOJContext::hasBlogPermission()) {

2
web/app/controllers/submission.php
View File

@ -3,7 +3,7 @@
requirePHPLib('judger'); requirePHPLib('judger');
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!validateUInt($_GET['id']) || !($submission = querySubmission($_GET['id']))) { if (!validateUInt($_GET['id']) || !($submission = querySubmission($_GET['id']))) {

2
web/app/controllers/submission_status_details.php
View File

@ -1,7 +1,7 @@
<?php <?php
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
if (!is_array($_GET['get'])) { if (!is_array($_GET['get'])) {

2
web/app/controllers/submissions_list.php
View File

@ -1,6 +1,6 @@
<?php <?php
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
$conds = array(); $conds = array();

2
web/app/controllers/user_info.php
View File

@ -1,6 +1,6 @@
<?php <?php
if (!Auth::check()) { if (!Auth::check()) {
becomeMsgPage(UOJLocale::get('need login')); become403Page(UOJLocale::get('need login'));
} }
$username = $_GET['username']; $username = $_GET['username'];

8
web/app/libs/uoj-html-lib.php
View File

@ -65,13 +65,13 @@ function becomeMsgPage($msg, $title = '消息') {
die(); die();
} }
} }
function become404Page() { function become404Page($message = '未找到页面。') {
header($_SERVER['SERVER_PROTOCOL'] . " 404 Not Found", true, 404); header($_SERVER['SERVER_PROTOCOL'] . " 404 Not Found", true, 404);
becomeMsgPage('<div class="text-center"><div style="font-size:233px">404</div><p>唔……未找到该页面……你是从哪里点进来的……&gt;_&lt;……</p></div>', '404'); becomeMsgPage('<div class="text-center"><div style="font-size:150px">404</div><p>' . $message . '</p></div>', '404');
} }
function become403Page() { function become403Page($message = '访问被拒绝，您可能需要适当的权限以访问此页面。') {
header($_SERVER['SERVER_PROTOCOL'] . " 403 Forbidden", true, 403); header($_SERVER['SERVER_PROTOCOL'] . " 403 Forbidden", true, 403);
becomeMsgPage('<div class="text-center"><div style="font-size:233px">403</div><p>禁止入内！ T_T</p></div>', '403'); becomeMsgPage('<div class="text-center"><div style="font-size:150px">403</div><p>' . $message . '</p></div>', '403');
} }
function getUserLink($username) { function getUserLink($username) {