diff options
| author | Lars-Dominik Braun <lars@6xq.net> | 2011-02-07 15:25:36 +0100 |
|---|---|---|
| committer | Lars-Dominik Braun <lars@6xq.net> | 2011-02-07 15:25:36 +0100 |
| commit | f8ee41a287e077e95085a4b26ceee3b92fa2bfd8 (patch) | |
| tree | da284b570b37aad3a0e50270ae1bfad6528a9d71 /src/libpiano/piano.c | |
| parent | ce8503f859345990a14be90bf89dadf7f73d7613 (diff) | |
| download | pianobar-f8ee41a287e077e95085a4b26ceee3b92fa2bfd8.tar.gz pianobar-f8ee41a287e077e95085a4b26ceee3b92fa2bfd8.tar.bz2 pianobar-f8ee41a287e077e95085a4b26ceee3b92fa2bfd8.zip | |
piano: xmlencode password
Fixes issue #87.
Diffstat (limited to 'src/libpiano/piano.c')
| -rw-r--r-- | src/libpiano/piano.c | 16 |
1 files changed, 14 insertions, 2 deletions
diff --git a/src/libpiano/piano.c b/src/libpiano/piano.c index 823e48d..a53c102 100644 --- a/src/libpiano/piano.c +++ b/src/libpiano/piano.c @@ -242,7 +242,16 @@ PianoReturn_t PianoRequest (PianoHandle_t *ph, PianoRequest_t *req, "rid=%s&method=sync", ph->routeId); break; - case 1: + case 1: { + char *xmlencodedPassword = NULL; + + /* username == email address does not contain &,<,>," */ + if ((xmlencodedPassword = + PianoXmlEncodeString (logindata->password)) == + NULL) { + return PIANO_RET_OUT_OF_MEMORY; + } + snprintf (xmlSendBuf, sizeof (xmlSendBuf), "<?xml version=\"1.0\"?><methodCall>" "<methodName>listener.authenticateListener</methodName>" @@ -250,10 +259,13 @@ PianoReturn_t PianoRequest (PianoHandle_t *ph, PianoRequest_t *req, "<param><value><string>%s</string></value></param>" "<param><value><string>%s</string></value></param>" "</params></methodCall>", (unsigned long) timestamp, - logindata->user, logindata->password); + logindata->user, xmlencodedPassword); snprintf (req->urlPath, sizeof (req->urlPath), PIANO_RPC_PATH "rid=%s&method=authenticateListener", ph->routeId); + + free (xmlencodedPassword); break; + } } break; } |