diff options
| -rw-r--r-- | module/web/cnl_app.py | 20 |
1 files changed, 12 insertions, 8 deletions
diff --git a/module/web/cnl_app.py b/module/web/cnl_app.py index 0e6aaf907..c7c091e02 100644 --- a/module/web/cnl_app.py +++ b/module/web/cnl_app.py @@ -1,4 +1,3 @@ -#!/usr/bin/env python # -*- coding: utf-8 -*- from os.path import join import re @@ -9,6 +8,7 @@ from binascii import unhexlify from bottle import route, request, HTTPError from webinterface import PYLOAD, DL_ROOT, JS + try: from Crypto.Cipher import AES except: @@ -17,8 +17,8 @@ except: def local_check(function): def _view(*args, **kwargs): - if request.environ.get('REMOTE_ADDR', "0") in ('127.0.0.1', 'localhost') \ - or request.environ.get('HTTP_HOST','0') == '127.0.0.1:9666': + if request.environ.get("REMOTE_ADDR", "0") in ("127.0.0.1", "localhost") \ + or request.environ.get("HTTP_HOST", "0") in ("127.0.0.1:9666", "localhost:9666"): return function(*args, **kwargs) else: return HTTPError(403, "Forbidden") @@ -33,6 +33,7 @@ def local_check(function): def flash(id="0"): return "JDownloader\r\n" + @route("/flash/add", method="POST") @local_check def add(request): @@ -46,10 +47,10 @@ def add(request): return "" + @route("/flash/addcrypted", method="POST") @local_check def addcrypted(): - package = request.forms.get('referer', 'ClickAndLoad Package') dlc = request.forms['crypted'].replace(" ", "+") @@ -65,10 +66,10 @@ def addcrypted(): else: return "success\r\n" + @route("/flash/addcrypted2", method="POST") @local_check def addcrypted2(): - package = request.forms.get("source", None) crypted = request.forms["crypted"] jk = request.forms["jk"] @@ -82,7 +83,7 @@ def addcrypted2(): try: jk = re.findall(r"return ('|\")(.+)('|\")", jk)[0][1] except: - ## Test for some known js functions to decode + ## Test for some known js functions to decode if jk.find("dec") > -1 and jk.find("org") > -1: org = re.findall(r"var org = ('|\")([^\"']+)", jk)[0][1] jk = list(org) @@ -114,13 +115,15 @@ def addcrypted2(): else: return "success\r\n" + @route("/flashgot_pyload") @route("/flashgot_pyload", method="POST") @route("/flashgot") @route("/flashgot", method="POST") @local_check def flashgot(): - if request.environ['HTTP_REFERER'] != "http://localhost:9666/flashgot" and request.environ['HTTP_REFERER'] != "http://127.0.0.1:9666/flashgot": + if request.environ['HTTP_REFERER'] != "http://localhost:9666/flashgot" and \ + request.environ['HTTP_REFERER'] != "http://127.0.0.1:9666/flashgot": return HTTPError() autostart = int(request.forms.get('autostart', 0)) @@ -135,6 +138,7 @@ def flashgot(): return "" + @route("/crossdomain.xml") @local_check def crossdomain(): @@ -149,13 +153,13 @@ def crossdomain(): @route("/flash/checkSupportForUrl") @local_check def checksupport(): - url = request.GET.get("url") res = PYLOAD.checkURLs([url]) supported = (not res[0][1] is None) return str(supported).lower() + @route("/jdcheck.js") @local_check def jdcheck(): |