tim/invoiceninja
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update Security Errors #2044

Browse source
This commit is contained in:
Hillel Coren 2018-04-21 21:59:00 +03:00
parent 1ae25c4ec7
commit 96e2d6734e
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/Http/Controllers/AppController.php
View file

@ -282,7 +282,9 @@ class AppController extends BaseController
if (! Utils::isNinjaProd()) {
if ($password = env('UPDATE_SECRET')) {
if (! hash_equals($password, request('secret') ?: '')) {
echo 'Invalid secret: /update?secret=<value>';
$message = 'Invalid secret: /update?secret=<value>';
Utils::logError($message);
echo $message;
exit;
}
}