Fixes timed caches.

Allowing a refresh of the timer opened the door to exploits.

1 files changed, 9 insertions, 1 deletions

diff --git a/src/io/database_shim.erl b/src/io/database_shim.erl
index 5ae6a62..0b9ea1c 100644
--- a/src/io/database_shim.erl
+++ b/src/io/database_shim.erl
@@ -12,7 +12,8 @@
    [
       generate_db/1,
       fetch/2,
-      commit/3
+      commit/3,
+      assert_session_is_valid/2
    ]
 ).
 
@@ -100,3 +101,10 @@ fetch (DB, ObjectID) ->
 commit (DB, ObjectID, Value) ->
    add_to_db({DB, ObjectID}, Value),
    timed_cache:invalidate(DB, ObjectID).
+
+assert_session_is_valid (_PlayerID, _SessionToken) ->
+   % Ask PlayerID's login server if SessionToken is correct.
+   % If so, update last login time to prevent relogin within
+   % (database_timeout * 2).
+   % If not, crash.
+   ok.