Fix for disabled logged-in users (#6612)

fix https://github.com/FreshRSS/FreshRSS/issues/6611
Logged-in users were still able to use their account for some time despite having being disabled by admin
This commit is contained in:
Alexandre Alapetite authored and GitHub committed 2024-07-08 11:05:58 +02:00
1 parent 8ae95055dc
commit 4738ca8512
2 files changed
+11 -10

No files matched your search

+1 -1
View File
@@ -36,7 +36,7 @@ if (!FreshRSS_Context::hasSystemConf() || !FreshRSS_Context::systemConf()->api_e
}
FreshRSS_Context::initUser($user);
if (!FreshRSS_Context::hasUserConf()) {
if (!FreshRSS_Context::hasUserConf() || !FreshRSS_Context::userConf()->enabled) {
usleep(rand(100, 10000)); //Primitive mitigation of scanning for users
header('HTTP/1.1 404 Not Found');
header('Content-Type: text/plain; charset=UTF-8');