Browse Source

Fix ranklists of hidden contests accessible by URL

pull/6/head
Pisces000221 7 years ago
parent
commit
e3013997d2
  1. 5
      modules/contest.js

5
modules/contest.js

@ -131,7 +131,7 @@ app.get('/contest/:id', async (req, res) => {
let contest = await Contest.fromID(contest_id); let contest = await Contest.fromID(contest_id);
if (!contest) throw new ErrorMessage('无此比赛。'); if (!contest) throw new ErrorMessage('无此比赛。');
if (!contest.is_public && (!res.locals.user || !res.locals.user.is_admin)) throw new ErrorMessage('无此比赛。'); if (!contest.is_public && (!res.locals.user || !res.locals.user.is_admin)) throw new ErrorMessage('比赛未公开,请耐心等待 (´∀ `)');
const isSupervisior = await contest.isSupervisior(curUser); const isSupervisior = await contest.isSupervisior(curUser);
contest.running = contest.isRunning(); contest.running = contest.isRunning();
@ -232,6 +232,7 @@ app.get('/contest/:id/ranklist', async (req, res) => {
const curUser = res.locals.user; const curUser = res.locals.user;
if (!contest) throw new ErrorMessage('无此比赛。'); if (!contest) throw new ErrorMessage('无此比赛。');
if (!contest.is_public && (!res.locals.user || !res.locals.user.is_admin)) throw new ErrorMessage('比赛未公开,请耐心等待 (´∀ `)');
if ([contest.allowedSeeingResult() && contest.allowedSeeingOthers(), if ([contest.allowedSeeingResult() && contest.allowedSeeingOthers(),
contest.isEnded(), contest.isEnded(),
await contest.isSupervisior(curUser)].every(x => !x)) await contest.isSupervisior(curUser)].every(x => !x))
@ -290,7 +291,7 @@ app.get('/contest/:id/submissions', async (req, res) => {
try { try {
let contest_id = parseInt(req.params.id); let contest_id = parseInt(req.params.id);
let contest = await Contest.fromID(contest_id); let contest = await Contest.fromID(contest_id);
if (!contest) throw new ErrorMessage('无此比赛。'); if (!contest.is_public && (!res.locals.user || !res.locals.user.is_admin)) throw new ErrorMessage('比赛未公开,请耐心等待 (´∀ `)');
if (contest.isEnded()) { if (contest.isEnded()) {
res.redirect(syzoj.utils.makeUrl(['submissions'], { contest: contest_id })); res.redirect(syzoj.utils.makeUrl(['submissions'], { contest: contest_id }));

Loading…
Cancel
Save