public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-16 08:25:57 +00:00
Code Issues Releases Wiki Activity

plugins/mail: remove secretkey stuff

Browse Source
This commit is contained in:
Andrew Dolgov
2013-04-03 22:55:46 +04:00
parent d0eef2a3b0
commit 83b1ddafef
1 changed files with 15 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
plugins/mail/init.php
View File

@@ -32,11 +32,6 @@ class Mail extends Plugin {
$param = db_escape_string($this->link, $_REQUEST['param']);
$secretkey = sha1(uniqid(rand(), true));
$_SESSION['email_secretkey'] = $secretkey;
print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"secretkey\" value=\"$secretkey\">";
print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"op\" value=\"pluginhandler\">";
print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"plugin\" value=\"mail\">";
print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"method\" value=\"sendEmail\">";
@@ -135,15 +130,10 @@ class Mail extends Plugin {
}
function sendEmail() {
$secretkey = $_REQUEST['secretkey'];
require_once 'classes/ttrssmailer.php';
$reply = array();
if ($_SESSION['email_secretkey'] &&
$secretkey == $_SESSION['email_secretkey']) {
$_SESSION['email_secretkey'] = '';
$replyto = strip_tags($_SESSION['email_replyto']);
@@ -168,10 +158,6 @@ class Mail extends Plugin {
$reply['message'] = "UPDATE_COUNTERS";
}
} else {
$reply['error'] = "Not authorized.";
}
print json_encode($reply);
}