diff --git a/web/admin/dashboard/dashboard.py b/web/admin/dashboard/dashboard.py index 4c0239b07..750e4a050 100644 --- a/web/admin/dashboard/dashboard.py +++ b/web/admin/dashboard/dashboard.py @@ -39,12 +39,20 @@ def admin_safe_path(path): if login != '': import base64 import json + import time try: # print(login) login_str = base64.b64decode(login) login_str = login_str.decode('utf-8') data = json.loads(login_str) + time_now = time.time() * 1000 + time_diff = time_now - data['time'] + + if time_diff > 2000: + return redirect('/') + + info = thisdb.getUserByName(data['username']) if info is None: return redirect('/')