Cutlery/invoiceninja
1
0
Fork 0
mirror of https://github.com/invoiceninja/invoiceninja.git synced 2025-07-07 13:14:30 -04:00
Code Issues Packages Projects Releases Wiki Activity

Update Security Errors #2044

Browse Source
This commit is contained in:
Hillel Coren 2018-04-21 21:59:00 +03:00
parent 1ae25c4ec7
commit 96e2d6734e
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Controllers/AppController.php
View File

@ -282,7 +282,9 @@ class AppController extends BaseController
if (! Utils::isNinjaProd()) { if (! Utils::isNinjaProd()) {
if ($password = env('UPDATE_SECRET')) { if ($password = env('UPDATE_SECRET')) {
if (! hash_equals($password, request('secret') ?: '')) { if (! hash_equals($password, request('secret') ?: '')) {
echo 'Invalid secret: /update?secret=<value>'; $message = 'Invalid secret: /update?secret=<value>';
Utils::logError($message);
echo $message;
exit; exit;
} }
} }