Fix for disabled logged-in users (#6612)

fix https://github.com/FreshRSS/FreshRSS/issues/6611
Logged-in users were still able to use their account for some time despite having being disabled by admin
This commit is contained in:
Alexandre Alapetite
2024-07-08 11:05:58 +02:00
committed by GitHub
parent 8ae95055dc
commit 4738ca8512
2 changed files with 11 additions and 10 deletions

View File

@@ -36,7 +36,7 @@ if (!FreshRSS_Context::hasSystemConf() || !FreshRSS_Context::systemConf()->api_e
}
FreshRSS_Context::initUser($user);
if (!FreshRSS_Context::hasUserConf()) {
if (!FreshRSS_Context::hasUserConf() || !FreshRSS_Context::userConf()->enabled) {
usleep(rand(100, 10000)); //Primitive mitigation of scanning for users
header('HTTP/1.1 404 Not Found');
header('Content-Type: text/plain; charset=UTF-8');