diff options
| author | Maryana Rozhankivska <mariroz@mr.lviv.ua> | 2014-07-24 16:48:41 +0300 |
|---|---|---|
| committer | Maryana Rozhankivska <mariroz@mr.lviv.ua> | 2014-07-24 16:48:41 +0300 |
| commit | 7dd8b5026d0ae52fc5be001ee224aac72f3e7b25 (patch) | |
| tree | 333ac92d8182ff498361c45f38bfea6aa66b84ea /inc/poche/Poche.class.php | |
| parent | 6da20812ce04e3e45c21c6da640d6ccde91e8c38 (diff) | |
| download | wallabag-7dd8b5026d0ae52fc5be001ee224aac72f3e7b25.tar.gz wallabag-7dd8b5026d0ae52fc5be001ee224aac72f3e7b25.tar.zst wallabag-7dd8b5026d0ae52fc5be001ee224aac72f3e7b25.zip | |
security issue
Diffstat (limited to 'inc/poche/Poche.class.php')
| -rwxr-xr-x | inc/poche/Poche.class.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/inc/poche/Poche.class.php b/inc/poche/Poche.class.php index a49413f2..098dd7c1 100755 --- a/inc/poche/Poche.class.php +++ b/inc/poche/Poche.class.php | |||
| @@ -750,8 +750,8 @@ class Poche | |||
| 750 | die(sprintf(_('User with this id (%d) does not exist.'), $user_id)); | 750 | die(sprintf(_('User with this id (%d) does not exist.'), $user_id)); |
| 751 | } | 751 | } |
| 752 | 752 | ||
| 753 | if (!in_array($type, $allowed_types) || $token != $config['token']) { | 753 | if (!in_array($type, $allowed_types) || !isset($config['token']) || $token != $config['token']) { |
| 754 | die(_('Uh, there is a problem while generating feeds.')); | 754 | die(_('Uh, there is a problem while generating feed. Wrong token used?')); |
| 755 | } | 755 | } |
| 756 | 756 | ||
| 757 | $feed = new FeedWriter(RSS2); | 757 | $feed = new FeedWriter(RSS2); |