Fix up tokens.cgi, thanks Pat Avery

This commit is contained in:
Neale Pickett 2015-06-03 15:42:03 -06:00
parent dd4c6b30b6
commit 77d8600c4e
1 changed files with 5 additions and 5 deletions

View File

@ -8,9 +8,6 @@ local koth = require "koth"
local team = cgi.fields['t'] or ""
local token = cgi.fields['k'] or ""
-- Defang category name; prevent directory traversal
category = category:gsub("[^A-Za-z0-9]", "-")
-- Check answer
local needle = token
local haystack = koth.path("tokens.txt")
@ -20,12 +17,15 @@ if (not found) then
koth.page("Unrecognized token", err)
end
local category, points = token.match("^(.*):(.*):")
if ((category == nil) || (points == nil)) then
local category, points = token:match("^(.*):(.*):")
if ((category == nil) or (points == nil)) then
koth.page("Unrecognized token", "Something doesn't look right about that token")
end
points = tonumber(points)
-- Defang category name; prevent directory traversal
category = category:gsub("[^A-Za-z0-9]", "-")
local ok, err = koth.award_points(team, category, points, token)
if (not ok) then
koth.page("Error awarding points",