Index: ktorrent-2.2.7/plugins/webinterface/httpserver.cpp =================================================================== --- ktorrent-2.2.7.orig/plugins/webinterface/httpserver.cpp +++ ktorrent-2.2.7/plugins/webinterface/httpserver.cpp @@ -431,9 +431,17 @@ namespace kt void HttpServer::handleTorrentPost(HttpClientHandler* hdlr,const QHttpRequestHeader & hdr,const QByteArray & data) { const char* ptr = data.data(); - Uint32 len = data.size(); + int len = data.size(); int pos = QString(data).find("\r\n\r\n"); + if (!session.logged_in || !checkSession(hdr)) + { + // You can't post torrents if you are not logged in + // or the session is not OK + redirectToLoginPage(hdlr); + return; + } + if (pos == -1 || pos + 4 >= len || ptr[pos + 4] != 'd') { HttpResponseHeader rhdr(500);