mirror/FreshRSS
0
0 Fork 0
mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-10-25 12:38:37 -04:00
Code Issues Packages Projects Releases Wiki Activity

Missing checkUsername and const patten

Browse Source 
https://github.com/FreshRSS/FreshRSS/pull/1423

https://github.com/YunoHost-Apps/freshrss_ynh/issues/27#issuecomment-279792363
This commit is contained in:
Alexandre Alapetite committed 2017-02-25 12:39:08 +01:00
1 parent 2e871a0adf
commit 271a1fdc89
11 files changed
+17 -12
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

p/api/greader.php
+1 -1
View File
@@ -152,7 +152,7 @@ function authorizationToUser() {
$headerAuthX = explode('/', $headerAuth, 2);
if (count($headerAuthX) === 2) {
$user = $headerAuthX[0];
if (ctype_alnum($user)) {
if (FreshRSS_user_Controller::checkUsername($user)) {
FreshRSS_Context::$user_conf = get_user_configuration($user);
if (FreshRSS_Context::$user_conf == null) {
Minz_Log::warning('Invalid API user ' . $user . ': configuration cannot be found.');