[X2go-Commits] x2goserver.git - master (branch) updated: 3.0.99.10-30-g65b0817

[X2go dev team]

The branch, master has been updated
       via  65b0817cef86ea0ee0085d539571bd4e689c6055 (commit)
      from  e298bd19efb2fc0b1e7d1ec256332f8d9871d2fd (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 65b0817cef86ea0ee0085d539571bd4e689c6055
Author: Mike Gabriel <mike.gabriel at das-netzwerkteam.de>
Date:   Wed Feb 22 08:21:28 2012 +0100

    make check_user a bit more picky

-----------------------------------------------------------------------

Summary of changes:
 x2goserver/lib/x2gosqlitewrapper.pl |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

The diff of changes is:
diff --git a/x2goserver/lib/x2gosqlitewrapper.pl b/x2goserver/lib/x2gosqlitewrapper.pl
index 2f6512e..1e3b7e3 100755
--- a/x2goserver/lib/x2gosqlitewrapper.pl
+++ b/x2goserver/lib/x2gosqlitewrapper.pl
@@ -324,8 +324,9 @@ sub check_user
 	my $sid=shift or die "argument \"session_id\" missed";
 	return if $realuser eq "root";
 	# session id looks like someuser-51-1304005895_stDgnome-session_dp24
+	# during DB insertsession it only looks like someuser-51-1304005895
 	my $user = "$sid";
-	$user =~ s/$realuser-[0-9]+-[0-9]+.*/$realuser/;
+	$user =~ s/$realuser-[0-9]{2,}-[0-9]{10,}.*/$realuser/;
 	$user eq $realuser or die "$realuser is not authorized";
 }
 


hooks/post-receive
-- 
x2goserver.git (X2Go Server)

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "x2goserver.git" (X2Go Server).