From fa61b899bc9091483ddcacbbda99ec324e868b4f Mon Sep 17 00:00:00 2001 From: Eevee Date: Sat, 14 Aug 2010 20:56:44 -0700 Subject: [PATCH] Crash fix: Force routing to only accept numeric forum/thread ids. --- splinext/forum/__init__.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/splinext/forum/__init__.py b/splinext/forum/__init__.py index 07db391..3d1b18a 100644 --- a/splinext/forum/__init__.py +++ b/splinext/forum/__init__.py @@ -12,11 +12,11 @@ def add_routes_hook(map, *args, **kwargs): require_POST = dict(conditions=dict(method=['POST'])) map.connect('/forums', controller='forum', action='forums') - map.connect('/forums/{forum_id}', controller='forum', action='threads') - map.connect('/forums/{forum_id}/threads/{thread_id}', controller='forum', action='posts') + map.connect(r'/forums/{forum_id:\d+}', controller='forum', action='threads') + map.connect(r'/forums/{forum_id:\d+}/threads/{thread_id:\d+}', controller='forum', action='posts') - map.connect('/forums/{forum_id}/write', controller='forum', action='write_thread') - map.connect('/forums/{forum_id}/threads/{thread_id}/write', controller='forum', action='write') + map.connect(r'/forums/{forum_id:\d+}/write', controller='forum', action='write_thread') + map.connect(r'/forums/{forum_id:\d+}/threads/{thread_id:\d+}/write', controller='forum', action='write') class ForumPlugin(PluginBase): -- 2.7.4