flash/sakura
flash/sakura
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

prevent logged out users from access settings

Browse source
This commit is contained in:
flash 2016-12-09 19:11:31 +01:00
parent 19c4740ada
commit 5f9e78cf4a
2 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
app/Controllers/Settings/AccountController.php
View file

@ -245,7 +245,6 @@ class AccountController extends Controller
]; ];
if (session_check() && $rank && $mode) { if (session_check() && $rank && $mode) {
// Check if user has this rank
if (!CurrentSession::$user->hasRanks([$rank])) { if (!CurrentSession::$user->hasRanks([$rank])) {
return $this->json(['error' => "You aren't a part of this rank!"]); return $this->json(['error' => "You aren't a part of this rank!"]);
} }

5
app/Controllers/Settings/Controller.php
View file

@ -6,6 +6,7 @@
namespace Sakura\Controllers\Settings; namespace Sakura\Controllers\Settings;
use Phroute\Phroute\Exception\HttpMethodNotAllowedException;
use Sakura\Controllers\Controller as BaseController; use Sakura\Controllers\Controller as BaseController;
use Sakura\CurrentSession; use Sakura\CurrentSession;
use Sakura\Template; use Sakura\Template;
@ -22,6 +23,10 @@ class Controller extends BaseController
*/ */
public function __construct() public function __construct()
{ {
if (!CurrentSession::$user->activated) {
throw new HttpMethodNotAllowedException;
}
Template::vars(['navigation' => $this->navigation()]); Template::vars(['navigation' => $this->navigation()]);
} }