From: Eevee <git@veekun.com>
Date: Sun, 15 Aug 2010 03:56:44 +0000 (-0700)
Subject: Crash fix: Force routing to only accept numeric forum/thread ids.
X-Git-Tag: veekun-promotions/2010082201~1
X-Git-Url: http://git.veekun.com/zzz-spline-forum.git/commitdiff_plain/fa61b899bc9091483ddcacbbda99ec324e868b4f?hp=34407a4a6052d7afa50caf0bcd6a8e6b55eb93a0

Crash fix: Force routing to only accept numeric forum/thread ids.
---

diff --git a/splinext/forum/__init__.py b/splinext/forum/__init__.py
index 07db391..3d1b18a 100644
--- a/splinext/forum/__init__.py
+++ b/splinext/forum/__init__.py
@@ -12,11 +12,11 @@ def add_routes_hook(map, *args, **kwargs):
     require_POST = dict(conditions=dict(method=['POST']))
 
     map.connect('/forums', controller='forum', action='forums')
-    map.connect('/forums/{forum_id}', controller='forum', action='threads')
-    map.connect('/forums/{forum_id}/threads/{thread_id}', controller='forum', action='posts')
+    map.connect(r'/forums/{forum_id:\d+}', controller='forum', action='threads')
+    map.connect(r'/forums/{forum_id:\d+}/threads/{thread_id:\d+}', controller='forum', action='posts')
 
-    map.connect('/forums/{forum_id}/write', controller='forum', action='write_thread')
-    map.connect('/forums/{forum_id}/threads/{thread_id}/write', controller='forum', action='write')
+    map.connect(r'/forums/{forum_id:\d+}/write', controller='forum', action='write_thread')
+    map.connect(r'/forums/{forum_id:\d+}/threads/{thread_id:\d+}/write', controller='forum', action='write')
 
 
 class ForumPlugin(PluginBase):