Changeset 3875 for WAeUP_SRP/trunk

Timestamp:

26 Jan 2009, 09:50:22 (16 years ago)

Author:

Henrik Bettermann

Message:

allow only two possible referers (see previous revision)

File:

• WAeUP_SRP/trunk/skins/waeup_epayment/interswitch_cb.py (modified) (2 diffs)

WAeUP_SRP/trunk/skins/waeup_epayment/interswitch_cb.py

@@ -46 +46 @@
 logger.info('%s, callback referer = %s, IP = %s' % (student_id,referer,real_ip))
 
-if referer == "":
-    logger.info('%s, no callback referrer, callback rejected, IP = %s' % (student_id,real_ip))
+if not 'webpay.interswitchng.com' in referer and not 'waeup.org' in referer:
+    logger.info('%s, wrong callback referrer %s, callback rejected, IP = %s' % (student_id,referer,real_ip))
     return request.RESPONSE.redirect("%s/waeup_document_view" % context.absolute_url())
 
@@ -85 +85 @@
 pay_doc = context.getContent()
 pay_doc.edit(mapping = pd)
-resp = pd['resp_code']
+resp = pd['resp_code']  
 
 s_brain = context.students_catalog(id=student_id)[0]