mirror of
https://github.com/easy-wi/developer.git
synced 2025-02-20 11:23:28 +08:00
Merge pull request #1049 from ice123123123/patch-1
security fix for reseller Accounts
This commit is contained in:
commit
09a48f1b03
@ -70,7 +70,7 @@ if ($ui->id('id', 19, 'get')) {
|
||||
|
||||
$sql = null;
|
||||
|
||||
if ($row['accounttype'] == 'u') {
|
||||
if ($row['accounttype'] == 'u' && $row['resellerid'] == $reseller_id) {
|
||||
|
||||
$_SESSION['userid'] = $ui->id('id', 19, 'get');
|
||||
|
||||
@ -103,4 +103,4 @@ if ($ui->id('id', 19, 'get')) {
|
||||
}
|
||||
}
|
||||
$sql = null;
|
||||
redirect('login.php');
|
||||
redirect('login.php');
|
||||
|
Loading…
x
Reference in New Issue
Block a user