Cutlery/invoiceninja
1
0
Fork 0
mirror of https://github.com/invoiceninja/invoiceninja.git synced 2025-07-09 03:14:30 -04:00
Code Issues Packages Projects Releases Wiki Activity

Update Security Errors #2044

Browse Source
This commit is contained in:
Hillel Coren 2018-04-21 21:56:09 +03:00
parent bba4de04bf
commit 9424049457
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/Http/Controllers/AppController.php
View File

@ -282,7 +282,8 @@ class AppController extends BaseController
if (! Utils::isNinjaProd()) { if (! Utils::isNinjaProd()) {
if ($password = env('UPDATE_SECRET')) { if ($password = env('UPDATE_SECRET')) {
if (! hash_equals($password, request('secret') ?: '')) { if (! hash_equals($password, request('secret') ?: '')) {
abort(400, 'Invalid secret: /update?secret=<value>'); echo 'Invalid secret: /update?secret=<value>';
exit;
} }
} }