From 807db479b718d57966ce2fb377909ff49a4eb93b Mon Sep 17 00:00:00 2001 From: Paul Sherwood Date: Mon, 31 Aug 2015 11:58:30 +0000 Subject: [PATCH] Dont allow uploads if password has not been changed --- artifactserver/kbas.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/artifactserver/kbas.py b/artifactserver/kbas.py index fd419c2..ed1af36 100755 --- a/artifactserver/kbas.py +++ b/artifactserver/kbas.py @@ -66,11 +66,12 @@ def get_artifact(cache_id): @app.get('/status') def status(): - return ('Status coming soon...') + return ('ybd kbas status coming soon...') @app.post('/upload') def post_artifact(): - if request.forms.get('password') != config['password']: + if config['password'] is 'insecure' or \ + request.forms.get('password') != config['password']: print 'Upload attempt: password fail' response.status = 401 # unauthorized return