INNER CODE UNIT · Python

login

l4wio/CTF-challenges-by-me · 0x3004/200-XYZBANK/app.py:54

def login():
	login_credential = list(request.form[i] for i in PARAMS) # get POST params
	if len(login_credential) != 3: render_template('index.html',error=u'Not enough parameters :-)')
	app.logger.warning('[DEUBG] login: %s -> %s' % (request.remote_addr,str(login_credential)))
	signin = login_query(login_credential)
	if signin is None:
		return render_template('index.html',error=WRONG_CRE,charset='utf-8')
	resp = make_response(redirect('/info'))
	resp.set_cookie('credential',b64encode(dumps(login_credential))) 
	return resp
	
@app.route('/info',methods=['GET'])
def info():

	try: credential = loads(b64decode(request.cookies.get('credential')))
	except:	credential = []
	if len(credential) != 3: return redirect('/logout')
	app.logger.warning('[DEUBG] info: %s -> %s' % (request.remote_addr,str(b64decode(request.cookies.get('credential')))))

View source record →