edv/VERAG_Homepage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bei nichteinhaltung der Datumsgrenze oder sonstigen Fehlern wird der Token aus Sicherheitsgründen aus dem Sessionspeicher entfernt.

Browse Source
This commit is contained in:
ja
2021-10-14 09:14:32 +02:00
parent 48a809c12d
commit 1fbe8e8d44
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
login/ForgotPW.aspx.vb
View File

@@ -243,14 +243,16 @@ Partial Class login_ForgotPW
Function getDateoftoken(tokenname As String) As Boolean Function getDateoftoken(tokenname As String) As Boolean
Dim data() As Byte = Convert.FromBase64String(tokenname) Dim data() As Byte = Convert.FromBase64String(tokenname)
Dim wenn As DateTime = DateTime.FromBinary(BitConverter.ToInt64(data, 0)) Dim wenn As DateTime = DateTime.FromBinary(BitConverter.ToInt64(data, 0))
If wenn < DateTime.UtcNow.AddMinutes(-30) Then If wenn > DateTime.UtcNow.AddMinutes(-30) Then
tokenname = String.Empty tokenname = String.Empty
'MsgBox("Token has not been found or is too old!" + Environment.NewLine + "Please send a new E-mail!") 'MsgBox("Token has not been found or is too old!" + Environment.NewLine + "Please send a new E-mail!")
Session.Remove("TokenforEmail")
Return False Return False
ElseIf tokenname = "NotYet" Then ElseIf tokenname = "NotYet" Then
Session.Remove("TokenforEmail")
Return False Return False
ElseIf tokenname = "Error04" Then ElseIf tokenname = "Error04" Then
Session.Remove("TokenforEmail")
Return False Return False
Else Else
Return True Return True