idea to avoid escaping chars

starsky/starsky.foundation.writemeta/Helpers/ExifToolCmdHelper.cs

@@ -2,6 +2,7 @@
 using System.Collections.Generic;
 using System.Globalization;
 using System.Linq;
+using System.Text;
 using System.Threading.Tasks;
 using starsky.foundation.database.Helpers;
 using starsky.foundation.database.Models;
@@ -270,6 +271,17 @@ private string UpdateGpsLongitudeCommand(string command, List<string> comparedNa
 			return command;
 		}
 
+		internal static string ReplaceBadChars(string inputText)
+		{
+			var cleanText = new StringBuilder();
+			const string badChars = "';`$\"\r\n\t*><?[]|&\\#()}{"; // removed space and dash
+			foreach ( var inputChar in inputText.Where(inputChar => !badChars.Contains(inputChar)) )
+			{
+				cleanText.Append(inputChar);
+			}
+			return cleanText.ToString();
+		}
+
 		private static string UpdateKeywordsCommand(string command, List<string> comparedNames, FileIndexItem updateModel)
 		{
 			if (comparedNames.Contains( nameof(FileIndexItem.Tags).ToLowerInvariant() ))

starsky/starsky.foundation.writemeta/Services/ExifToolService.cs

@@ -20,8 +20,8 @@ public ExifToolService(ISelectorStorage selectorStorage, AppSettings appSettings
 			var iStorage = selectorStorage.Get(SelectorStorage.StorageServices.SubPath);
 			var thumbnailStorage = selectorStorage.Get(SelectorStorage.StorageServices.Thumbnail);
 			_exifTool = new ExifTool(iStorage, thumbnailStorage, appSettings,logger);
-
 		}
+
 		public async Task<bool> WriteTagsAsync(string subPath, string command)
 		{
 			return await _exifTool.WriteTagsAsync(subPath,command);

starsky/starsky/Controllers/AccountController.cs

@@ -8,6 +8,7 @@
 using starsky.foundation.accountmanagement.Interfaces;
 using starsky.foundation.accountmanagement.Models;
 using starsky.foundation.accountmanagement.Models.Account;
+using starsky.foundation.platform.Interfaces;
 using starsky.foundation.platform.Models;
 using starsky.foundation.storage.Interfaces;
 using starsky.foundation.storage.Storage;
@@ -21,13 +22,15 @@ public class AccountController : Controller
         private readonly AppSettings _appSettings;
         private readonly IAntiforgery _antiForgery;
         private readonly IStorage _storageHostFullPathFilesystem;
+        private readonly IWebLogger _logger;
 
-        public AccountController(IUserManager userManager, AppSettings appSettings, IAntiforgery antiForgery, ISelectorStorage selectorStorage)
+        public AccountController(IUserManager userManager, AppSettings appSettings, IAntiforgery antiForgery, ISelectorStorage selectorStorage, IWebLogger logger)
         {
             _userManager = userManager;
             _appSettings = appSettings;
             _antiForgery = antiForgery;
             _storageHostFullPathFilesystem = selectorStorage.Get(SelectorStorage.StorageServices.HostFilesystem);
+            _logger = logger;
         }
 
 		/// <summary>
@@ -51,7 +54,7 @@ public async Task<IActionResult> Status()
 				return Json("There are no accounts, you must create an account first");
 			}
 
-			if ( !User.Identity.IsAuthenticated ) return Unauthorized("false");
+			if ( User.Identity?.IsAuthenticated == false) return Unauthorized("false");
 
 			// use model to avoid circular references
 			var currentUser = _userManager.GetCurrentUser(HttpContext);
@@ -112,6 +115,9 @@ public IActionResult LoginGet(string returnUrl = null, bool? fromLogout = null)
         [Produces("application/json")]
         public async Task<IActionResult> LoginPost(LoginViewModel model)
         {
+	        var remoteIp = Request.HttpContext.Connection.RemoteIpAddress?.ToString();
+	        _logger.LogInformation("[LoginPost]" +remoteIp);
+
             ValidateResult validateResult = await _userManager.ValidateAsync("Email", model.Email, model.Password);
 
             if (!validateResult.Success)
@@ -125,7 +131,7 @@ public async Task<IActionResult> LoginPost(LoginViewModel model)
             } 
 
             await _userManager.SignIn(HttpContext, validateResult.User, model.RememberMe);
-            if ( User.Identity.IsAuthenticated)
+            if ( User.Identity?.IsAuthenticated == true)
             {
 	            return Json("Login Success");
             }
@@ -178,14 +184,16 @@ public IActionResult Logout(string returnUrl = null)
         [Authorize]
         public async Task<IActionResult> ChangeSecret(ChangePasswordViewModel model)
         {
-	        if ( !User.Identity.IsAuthenticated ) return Unauthorized("please login first");
+	        if ( User.Identity?.IsAuthenticated != true ) return Unauthorized("please login first");
 
 	        if ( !ModelState.IsValid || model.ChangedPassword != model.ChangedConfirmPassword )
 		        return BadRequest("Model is not correct");
 
 	        var currentUserId =
 		        _userManager.GetCurrentUser(HttpContext).Id;
 
+	        _logger.LogInformation($"[ChangeSecret] for {currentUserId}");
+
 	        var credential = _userManager.GetCredentialsByUserId(currentUserId);
 
 	        // Re-check password
@@ -222,7 +230,7 @@ public async Task<IActionResult> ChangeSecret(ChangePasswordViewModel model)
         [ValidateAntiForgeryToken]
         public async Task<IActionResult> Register(RegisterViewModel model)
         {
-	        if ( await IsAccountRegisterClosed(User.Identity.IsAuthenticated) )
+	        if ( await IsAccountRegisterClosed(User.Identity?.IsAuthenticated) )
 	        {
 		        Response.StatusCode = 403;
 		        return Json("Account Register page is closed");
@@ -244,9 +252,9 @@ public async Task<IActionResult> Register(RegisterViewModel model)
         /// </summary>
         /// <param name="userIdentityIsAuthenticated"></param>
         /// <returns></returns>
-        private async Task<bool> IsAccountRegisterClosed(bool userIdentityIsAuthenticated)
+        private async Task<bool> IsAccountRegisterClosed(bool? userIdentityIsAuthenticated)
         {
-	        if ( userIdentityIsAuthenticated ) return false;
+	        if ( userIdentityIsAuthenticated == true) return false;
 	        return _appSettings.IsAccountRegisterOpen != true && (await _userManager.AllUsersAsync()).Any();
         }
 

starsky/starskytest/Middleware/BasicAuthenticationMiddlewareTest.cs

@@ -100,7 +100,7 @@ public async Task BasicAuthenticationMiddlewareLoginTest()
 			var schemeProvider = _serviceProvider.GetRequiredService<IAuthenticationSchemeProvider>();
 
 			var controller =
-				new AccountController(_userManager, new AppSettings(), new FakeAntiforgery(), new FakeSelectorStorage())
+				new AccountController(_userManager, new AppSettings(), new FakeAntiforgery(), new FakeSelectorStorage(), new FakeIWebLogger())
 				{
 					ControllerContext = {HttpContext = httpContext}
 				};