Changeset 9749 for src/django_gheat/wlheatmap/forms.py

Timestamp:

Dec 3, 2011, 12:17:28 PM (13 years ago)

Author:

rick

Message:

Some awefull quirks to avoid uploading files without authentication.

File:

• src/django_gheat/wlheatmap/forms.py (modified) (4 diffs)

src/django_gheat/wlheatmap/forms.py

@@ -1 +1 @@
 from django import forms
+from django.conf import settings
+from django.contrib.auth import authenticate, login
+from django.contrib.auth.decorators import login_required
 from django.core.files.base import ContentFile
+from django.db import IntegrityError
+from django.http import HttpResponse,HttpResponseServerError
 from django.shortcuts import render_to_response
-from django.http import HttpResponse,HttpResponseServerError
-from django.conf import settings
 from gheat.models import *
-from django.db import IntegrityError
 
 def get_apperatuur_choices(item):
@@ -11 +13 @@
 
 class MeetBestandForm(forms.Form):
+    username = forms.CharField()
+    password = forms.CharField()
     naam = forms.ChoiceField(choices=Gebruiker.objects.values_list('naam','naam'))
     kaart = forms.ChoiceField(choices=get_apperatuur_choices('kaart'))
@@ -18 +22 @@
 
 #
-# curl  -F naam=huub -F kaart=onbekend -F antenne=onbekend -F bestand=@manage.py -F surveyid=kerk http://localhost:8000/wlheatp/add/meetbestand/
+# curl -Fusername=huub -Fpassword=bert -F naam=huub -F kaart=onbekend -F antenne=onbekend -F bestand=@manage.py -F surveyid=kerk http://localhost:8000/wlheatmap/add/meetbestand/
 def add_meetbestand(request):
   if request.method == 'POST':
     form = MeetBestandForm(request.POST, request.FILES)
     if form.is_valid():
+      username = form.cleaned_data['username']
+      password = form.cleaned_data['password']
+      user = authenticate(username=username, password=password)
+      if user == None or not user.is_active:
+        return HttpResponseServerError('ERROR: Authentication Failed')
+
+      login(request, user)
+
       gebruiker = Gebruiker.objects.get(naam=form.cleaned_data['naam'])
       apparatuur, created = Apparatuur.objects.get_or_create(kaart=form.cleaned_data['kaart'],
@@ -37 +49 @@
         return HttpResponse('OK: Attached to meetrondje %s' % meetrondje)
       else:
-        return HttpResponseServerError('ERROR File does already exists')
+        return HttpResponseServerError('ERROR: File does already exists')
     else:
-      return HttpResponseServerError('ERROR No valid input')
+      return HttpResponseServerError('ERROR: No valid input')
   else:
     form = MeetBestandForm()