mirror of
https://github.com/FreshRSS/FreshRSS.git
synced 2026-01-21 11:47:53 -05:00
Missing checkUsername and const patten
https://github.com/FreshRSS/FreshRSS/pull/1423 https://github.com/YunoHost-Apps/freshrss_ynh/issues/27#issuecomment-279792363
This commit is contained in:
@@ -26,7 +26,7 @@ class FreshRSS_javascript_Controller extends Minz_ActionController {
|
||||
header('Pragma: no-cache');
|
||||
|
||||
$user = isset($_GET['user']) ? $_GET['user'] : '';
|
||||
if (ctype_alnum($user)) {
|
||||
if (FreshRSS_user_Controller::checkUsername($user)) {
|
||||
try {
|
||||
$salt = FreshRSS_Context::$system_conf->salt;
|
||||
$conf = get_user_configuration($user);
|
||||
|
||||
Reference in New Issue
Block a user