X-Git-Url: https://git.pterodactylus.net/?a=blobdiff_plain;f=src%2Fhttp%2Fpages%2Fcontrolboardpage.cpp;h=5677a91d137d92560da7442a2c48819e33b66379;hb=fcb124f8d6d3f5678e82049fb8e5e23c8cfaec6d;hp=c685ca42d0e95079c742bc044ed9b06ff23e124c;hpb=df316253862dc50e8e5a790d9634ef90be37badb;p=fms.git

diff --git a/src/http/pages/controlboardpage.cpp b/src/http/pages/controlboardpage.cpp
index c685ca4..5677a91 100644
--- a/src/http/pages/controlboardpage.cpp
+++ b/src/http/pages/controlboardpage.cpp
@@ -1,6 +1,8 @@
 #include "../../../include/http/pages/controlboardpage.h"
 #include "../../../include/stringfunctions.h"
-#include "../../../include/datetime.h"
+
+#include <Poco/DateTime.h>
+#include <Poco/DateTimeFormatter.h>
 
 #ifdef XMEM
 	#include <xmem.h>
@@ -21,7 +23,7 @@ const std::string ControlBoardPage::GeneratePage(const std::string &method, cons
 
 	if(queryvars.find("formaction")!=queryvars.end())
 	{
-		if((*queryvars.find("formaction")).second=="remove" && queryvars.find("boardid")!=queryvars.end())
+		if((*queryvars.find("formaction")).second=="remove" && queryvars.find("boardid")!=queryvars.end() && ValidateFormPassword(queryvars))
 		{
 			int boardid=0;
 			StringFunctions::Convert((*queryvars.find("boardid")).second,boardid);
@@ -43,13 +45,12 @@ const std::string ControlBoardPage::GeneratePage(const std::string &method, cons
 			st.Step();
 
 		}
-		if((*queryvars.find("formaction")).second=="addboard" && queryvars.find("boardname")!=queryvars.end() && (*queryvars.find("boardname")).second!="")
+		if((*queryvars.find("formaction")).second=="addboard" && queryvars.find("boardname")!=queryvars.end() && (*queryvars.find("boardname")).second!="" && ValidateFormPassword(queryvars))
 		{
-			DateTime date;
-			date.SetToGMTime();
+			Poco::DateTime date;
 			st=m_db->Prepare("INSERT INTO tblBoard(BoardName,DateAdded) VALUES(?,?);");
 			st.Bind(0,(*queryvars.find("boardname")).second);
-			st.Bind(1,date.Format("%Y-%m-%d %H:%M:%S"));
+			st.Bind(1,Poco::DateTimeFormatter::format(date,"%Y-%m-%d %H:%M:%S"));
 			if(st.Step(true))
 			{
 				boardid=st.GetLastInsertRowID();
@@ -89,6 +90,7 @@ const std::string ControlBoardPage::GeneratePage(const std::string &method, cons
 		content+="<td>"+changetrustlisttruststr+"</td>\r\n";
 		content+="<td>";
 		content+="<form name=\"frmremove\" method=\"POST\">";
+		content+=CreateFormPassword();
 		content+="<input type=\"hidden\" name=\"formaction\" value=\"remove\">";
 		content+="<input type=\"hidden\" name=\"boardid\" value=\""+boardidstr+"\">";
 		content+="<input type=\"submit\" value=\"Remove\">";
@@ -101,12 +103,13 @@ const std::string ControlBoardPage::GeneratePage(const std::string &method, cons
 	content+="<tr>";
 	content+="<td>";
 	content+="<form name=\"frmaddboard\" method=\"POST\">";
+	content+=CreateFormPassword();
 	content+="<input type=\"hidden\" name=\"formaction\" value=\"addboard\">";
 	content+="<input type=\"text\" name=\"boardname\">";
 	content+="</td>\r\n<td>";
-	content+="<input type=\"text\" name=\"changemessagetrust\" size=\"2\" maxlength=\"3\">";
+	content+="<input type=\"text\" name=\"changemessagetrust\" size=\"2\" maxlength=\"4\">";
 	content+="</td>\r\n<td>";
-	content+="<input type=\"text\" name=\"changetrustlisttrust\" size=\"2\" maxlength=\"3\">";
+	content+="<input type=\"text\" name=\"changetrustlisttrust\" size=\"2\" maxlength=\"4\">";
 	content+="</td>\r\n<td>";
 	content+="<input type=\"submit\" value=\"Add\">";
 	content+="</form>";
@@ -114,7 +117,7 @@ const std::string ControlBoardPage::GeneratePage(const std::string &method, cons
 	content+="</tr>";
 	content+="</table>";
 
-	return "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\n\r\n"+StringFunctions::Replace(m_template,"[CONTENT]",content);
+	return StringFunctions::Replace(m_template,"[CONTENT]",content);
 }
 
 const bool ControlBoardPage::WillHandleURI(const std::string &uri)