punky
/
botany
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Prevent exploitation of visit feature

pull/8/head
Jake Funke 2018-03-13 18:03:57 -07:00
parent b9ef7c31bb
commit ce268c0609
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
botany.py
View File

@ -231,8 +231,10 @@ class Plant(object):
self.visitors.append(element['user'])
if element['user'] not in visitors_this_check:
visitors_this_check.append(element['user'])
if element['timestamp'] > latest_timestamp:
latest_timestamp = element['timestamp']
# prevent users from manually setting watered_time in the future
if element['timestamp'] < int(time.time()):
if element['timestamp'] > latest_timestamp:
latest_timestamp = element['timestamp']
try:
self.update_visitor_db(visitors_this_check)
except: