punky
/
botany
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Prevent exploitation of visit feature

pull/8/head
Jake Funke 2018-03-13 18:03:57 -07:00
parent b9ef7c31bb
commit ce268c0609
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
botany.py
View File

@ -231,6 +231,8 @@ class Plant(object):
self.visitors.append(element['user']) self.visitors.append(element['user'])
if element['user'] not in visitors_this_check: if element['user'] not in visitors_this_check:
visitors_this_check.append(element['user']) visitors_this_check.append(element['user'])
# prevent users from manually setting watered_time in the future
if element['timestamp'] < int(time.time()):
if element['timestamp'] > latest_timestamp: if element['timestamp'] > latest_timestamp:
latest_timestamp = element['timestamp'] latest_timestamp = element['timestamp']
try: try: