yv01p/Umbraco-CMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixes installer login check

Browse Source
This commit is contained in:
Shannon
2013-12-10 11:51:41 +11:00
parent 94db371234
commit ce4b56895e
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/Umbraco.Web.UI/install/Default.aspx.cs
View File

@@ -64,12 +64,16 @@ namespace Umbraco.Web.UI.Install
if (string.IsNullOrWhiteSpace(GlobalSettings.ConfigurationStatus) == false)
{
var result = Security.ValidateCurrentUser(new HttpContextWrapper(Context));
if (result == ValidateRequestAttempt.FailedTimedOut || result == ValidateRequestAttempt.FailedNoPrivileges)
switch (result)
{
Response.Redirect(
//We must add the token to prevent CSRF attacks since the logout occurs on a GET not a POST
case ValidateRequestAttempt.FailedNoPrivileges:
case ValidateRequestAttempt.FailedTimedOut:
case ValidateRequestAttempt.FailedNoContextId:
Response.Redirect(
//We must add the token to prevent CSRF attacks since the logout occurs on a GET not a POST
SystemDirectories.Umbraco + "/logout.aspx?redir=" + Server.UrlEncode(Request.RawUrl) + "&t=" + Security.UmbracoUserContextId);
break;
}
}