Cutlery/invoiceninja
1
0
Fork 0
mirror of https://github.com/invoiceninja/invoiceninja.git synced 2025-06-23 20:00:33 -04:00
Code Issues Packages Projects Releases Wiki Activity

Update Security Errors #2044

Browse Source
This commit is contained in:
Hillel Coren 2018-04-21 21:59:00 +03:00
parent 1ae25c4ec7
commit 96e2d6734e
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Controllers/AppController.php
View File

@ -282,7 +282,9 @@ class AppController extends BaseController
if (! Utils::isNinjaProd()) {
if ($password = env('UPDATE_SECRET')) {
if (! hash_equals($password, request('secret') ?: '')) {
echo 'Invalid secret: /update?secret=<value>';
$message = 'Invalid secret: /update?secret=<value>';
Utils::logError($message);
echo $message;
exit;
}
}