mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2024-12-26 02:56:25 +00:00
Code Issues 25 Releases Wiki Activity

Fixed #335 -- Admin login form now checks that cookies are enabled.

Browse Source 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@529 bcc190cf-cafb-0310-a4f2-bffc1f526a37
This commit is contained in:
Adrian Holovaty 2005-08-17 22:04:53 +00:00
parent 8acb6c836b
commit b1d9682a38
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
django/middleware/admin.py
View File

@ -48,6 +48,11 @@ class AdminUserRequired:
message = "" message = ""
return self.display_login_form(request, message) return self.display_login_form(request, message)
# Check that the user accepts cookies.
if not request.session.test_cookie_worked():
message = "Looks like your browser isn't configured to accept cookies. Please enable cookies, reload this page, and try again."
return self.display_login_form(request, message)
# Check the password # Check the password
username = request.POST.get('username', '') username = request.POST.get('username', '')
try: try:
@ -81,6 +86,7 @@ class AdminUserRequired:
return self.display_login_form(request, ERROR_MESSAGE) return self.display_login_form(request, ERROR_MESSAGE)
def display_login_form(self, request, error_message=''): def display_login_form(self, request, error_message=''):
request.session.set_test_cookie()
if request.POST and request.POST.has_key('post_data'): if request.POST and request.POST.has_key('post_data'):
# User has failed login BUT has previously saved 'post_data' # User has failed login BUT has previously saved 'post_data'
post_data = request.POST['post_data'] post_data = request.POST['post_data']