Merge pull request #2355 from int2001/welcome_fix

protect DANGEROUS Functions from being called without authed user
这个提交包含在:
Andreas Kristiansen 2023-08-01 13:26:37 +02:00 提交者 GitHub
当前提交 25e62a2708
找不到此签名对应的密钥
GPG 密钥 ID: 4AEE18F83AFDEB23

查看文件

@ -8,9 +8,14 @@
class Welcome extends CI_Controller { class Welcome extends CI_Controller {
function __construct() {
parent::__construct();
public function index() $this->load->model('user_model');
{ if(!$this->user_model->authorize(2)) { $this->session->set_flashdata('notice', 'You\'re not allowed to do that!'); redirect('dashboard'); }
}
public function index() {
if($this->optionslib->get_option('version2_trigger') == "false") { if($this->optionslib->get_option('version2_trigger') == "false") {
$data['page_title'] = "Welcome to Cloudlog Version 2.0"; $data['page_title'] = "Welcome to Cloudlog Version 2.0";
@ -96,4 +101,4 @@ class Welcome extends CI_Controller {
echo "Error claiming API Keys during Migration. See Logs for further information"; echo "Error claiming API Keys during Migration. See Logs for further information";
} }
} }
} }