ix
/
website
forked from 42CTF/website
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix access to event challenges when event not begun or user not connected

This commit is contained in:
ix 2021-12-10 09:47:45 +01:00
parent 98350ad0d7
commit 8ae6d83450
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/events/views.py
View File

@ -27,6 +27,8 @@ def events(request):
def chall_event_info(request, event_slug, chall_slug): def chall_event_info(request, event_slug, chall_slug):
event_info = get_object_or_404(Event, slug=event_slug) event_info = get_object_or_404(Event, slug=event_slug)
ctf_info = get_object_or_404(CTF, event__slug=event_info.slug, slug=chall_slug) ctf_info = get_object_or_404(CTF, event__slug=event_info.slug, slug=chall_slug)
if timezone.now() < ctf_info.start_date:
return redirect('events:event_info', event_slug=event_slug)
eventisover = False eventisover = False
alreadyflag = False alreadyflag = False
congrat = False congrat = False
@ -37,6 +39,8 @@ def chall_event_info(request, event_slug, chall_slug):
userScore = Scores.objects.filter(event=event_info, user=request.user) userScore = Scores.objects.filter(event=event_info, user=request.user)
if not userScore: if not userScore:
return redirect('/') return redirect('/')
elif not request.user.is_authenticated:
return redirect('/')
if request.GET.get('EventIsOver'): if request.GET.get('EventIsOver'):
eventisover = True eventisover = True
if request.GET.get('AlreadyFlagged'): if request.GET.get('AlreadyFlagged'):