changeset 615:56a239027b87

bbb: strip input data for meeting creation and storing
author Reimar Bauer <rb.proj AT googlemail DOT com>
date Wed, 15 Aug 2012 13:39:27 +0200
parents 81cb72cfddac
children 36ea97c06541
files data/plugin/action/submit_bbb_create_meeting.py
diffstat 1 files changed, 5 insertions(+), 5 deletions(-) [+]
line wrap: on
line diff
--- a/data/plugin/action/submit_bbb_create_meeting.py	Wed Aug 15 13:36:59 2012 +0200
+++ b/data/plugin/action/submit_bbb_create_meeting.py	Wed Aug 15 13:39:27 2012 +0200
@@ -42,23 +42,23 @@
     if request.user.valid and username in bbb_admin_group:
         _ = request.getText
 
-        attendee_password = request.form["attendee_password"]
-        moderator_password = request.form["moderator_password"]
+        attendee_password = request.form["attendee_password"].strip()
+        moderator_password = request.form["moderator_password"].strip()
 
-        if not attendee_password.strip() or not moderator_password.strip():
+        if not attendee_password or not moderator_password:
             msg, state = ("Sorry, we don't support empty passwords!", "error")
             request.theme.add_msg(msg, state)
             Page(request, pagename).send_page()
             return
 
-        sub_pagename = u'%s/%s' % (pagename, request.form["meeting_name"])
+        sub_pagename = u'%s/%s' % (pagename, request.form["meeting_name"].strip())
         if Page(request, sub_pagename).exists():
             msg, state = ("Sorry, a meeting with that name %(meeting_name)s already exists!" % {"meeting_name": request.form["meeting_name"]}, "error")
             request.theme.add_msg(msg, state)
             Page(request, pagename).send_page()
             return
 
-        keyval = "\n".join([' %s:: %s' % (key, value) for key, value in request.form.iteritems() if not (key.startswith('labels') or key.startswith('action') or key.startswith('doit'))])
+        keyval = "\n".join([' %s:: %s' % (key, value.strip()) for key, value in request.form.iteritems() if not (key.startswith('labels') or key.startswith('action') or key.startswith('doit'))])
         result = """#acl %(username)s:admin,read,write,delete,revert %(bbb_admin_group)s:read All:
 #format bbb_create
  responsible:: %(username)s