lucidergs/dragon_fire
1
0
Fork 0
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity Actions

feature(security): add can-upload check

Browse source
This commit is contained in:
David Bailey 2024-11-18 22:48:28 +01:00
parent 2e012b4fd5
commit 626a4bbaf6
1 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
www/src/setup/permissions.php
View file

@ -5,7 +5,10 @@ $ACCESS_PERMISSIONS = [
"upload" => false
];
$ACCESS_KEY = $REQUEST_QUERY['ACCESS_KEY'] ?? $_COOKIE['ACCESS_KEY'] ?? '';
$ACCESS_KEY = $REQUEST_QUERY['ACCESS_KEY']
?? $_POST['ACCESS_KEY']
?? $_COOKIE['ACCESS_KEY']
?? '';
if($ACCESS_KEY == $SITE_CONFIG['ACCESS_KEY']) {
$ACCESS_PERMISSIONS = [
@ -14,4 +17,10 @@ if($ACCESS_KEY == $SITE_CONFIG['ACCESS_KEY']) {
];
}
function access_can_upload() {
global $ACCESS_PERMISSIONS;
return $ACCESS_PERMISSIONS['upload'];
}
?>