Browse Source

Fix issue #238: possibilité d'actualiser avec token

En précisant le token il est possible maintenant d'actualiser les flux
sans avoir besoin de se connecter
Marien Fressinaud 12 years ago
parent
commit
602230ec53
1 changed files with 8 additions and 1 deletions
  1. 8 1
      app/controllers/feedController.php

+ 8 - 1
app/controllers/feedController.php

@@ -2,7 +2,14 @@
 
 
 class feedController extends ActionController {
 class feedController extends ActionController {
 	public function firstAction () {
 	public function firstAction () {
-		if (login_is_conf ($this->view->conf) && !is_logged ()) {
+		$token = $this->view->conf->token();
+		$token_param = Request::param ('token', '');
+		$token_is_ok = ($token != '' && $token == $token_param);
+		$action = Request::actionName ();
+
+		if (login_is_conf ($this->view->conf) &&
+				!is_logged () &&
+				!($token_is_ok && $action == 'actualize')) {
 			Error::error (
 			Error::error (
 				403,
 				403,
 				array ('error' => array (Translate::t ('access_denied')))
 				array ('error' => array (Translate::t ('access_denied')))