dinislage/web2py
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

auth.crsf_prevention = False

Browse Source
This commit is contained in:
mdipierro
2013-09-05 17:26:40 -05:00
parent 3bb31b1f09
commit fceb9a57ce
2 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
VERSION
+1 -1
View File
@@ -1 +1 @@
Version 2.6.0-development+timestamp.2013.09.05.17.22.51 Version 2.6.0-development+timestamp.2013.09.05.17.25.20
gluon/tools.py
+7 -7
View File
@@ -1121,7 +1121,7 @@ class Auth(object):
def __init__(self, environment=None, db=None, mailer=True, def __init__(self, environment=None, db=None, mailer=True,
hmac_key=None, controller='default', function='user', hmac_key=None, controller='default', function='user',
cas_provider=None, signature=True, secure=False, cas_provider=None, signature=True, secure=False,
csrf_on=True): csrf_prevention=True):
""" """
auth=Auth(db) auth=Auth(db)
@@ -1137,7 +1137,7 @@ class Auth(object):
db = environment db = environment
self.db = db self.db = db
self.environment = current self.environment = current
self.csrf_on = csrf_on self.csrf_prevention = csrf_prevention
request = current.request request = current.request
session = current.session session = current.session
auth = session.auth auth = session.auth
@@ -2269,7 +2269,7 @@ class Auth(object):
settings.formstyle, 'captcha__row') settings.formstyle, 'captcha__row')
accepted_form = False accepted_form = False
if form.accepts(request, session if self.csrf_on else None, if form.accepts(request, session if self.csrf_prevention else None,
formname='login', dbio=False, formname='login', dbio=False,
onvalidation=onvalidation, onvalidation=onvalidation,
hideerror=settings.hideerror): hideerror=settings.hideerror):
@@ -2511,7 +2511,7 @@ class Auth(object):
captcha.comment, self.settings.formstyle, 'captcha__row') captcha.comment, self.settings.formstyle, 'captcha__row')
table_user.registration_key.default = key = web2py_uuid() table_user.registration_key.default = key = web2py_uuid()
if form.accepts(request, session if self.csrf_on else None, if form.accepts(request, session if self.csrf_prevention else None,
formname='register', formname='register',
onvalidation=onvalidation, onvalidation=onvalidation,
hideerror=self.settings.hideerror): hideerror=self.settings.hideerror):
@@ -2657,7 +2657,7 @@ class Auth(object):
addrow(form, captcha.label, captcha, addrow(form, captcha.label, captcha,
captcha.comment, self.settings.formstyle, 'captcha__row') captcha.comment, self.settings.formstyle, 'captcha__row')
if form.accepts(request, session if self.csrf_on else None, if form.accepts(request, session if self.csrf_prevention else None,
formname='retrieve_username', dbio=False, formname='retrieve_username', dbio=False,
onvalidation=onvalidation, hideerror=self.settings.hideerror): onvalidation=onvalidation, hideerror=self.settings.hideerror):
user = table_user(email=form.vars.email) user = table_user(email=form.vars.email)
@@ -2735,7 +2735,7 @@ class Auth(object):
formstyle=self.settings.formstyle, formstyle=self.settings.formstyle,
separator=self.settings.label_separator separator=self.settings.label_separator
) )
if form.accepts(request, session if self.csrf_on else None, if form.accepts(request, session if self.csrf_prevention else None,
formname='retrieve_password', dbio=False, formname='retrieve_password', dbio=False,
onvalidation=onvalidation, hideerror=self.settings.hideerror): onvalidation=onvalidation, hideerror=self.settings.hideerror):
user = table_user(email=form.vars.email) user = table_user(email=form.vars.email)
@@ -2880,7 +2880,7 @@ class Auth(object):
if captcha: if captcha:
addrow(form, captcha.label, captcha, addrow(form, captcha.label, captcha,
captcha.comment, self.settings.formstyle, 'captcha__row') captcha.comment, self.settings.formstyle, 'captcha__row')
if form.accepts(request, session if self.csrf_on else None, if form.accepts(request, session if self.csrf_prevention else None,
formname='reset_password', dbio=False, formname='reset_password', dbio=False,
onvalidation=onvalidation, onvalidation=onvalidation,
hideerror=self.settings.hideerror): hideerror=self.settings.hideerror):