mirrors/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2025-04-26 19:29:58 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

fixes #1344 add auth exception for pwg.images.uploadAsync

Browse source 
This method handles its own authentication and can be called by an anonymous request. Thus it should not be blocked by a $conf[guest_access] setting set to false.
This commit is contained in:
plegall 2021-03-05 16:35:09 +01:00
parent e64acd03c5
commit 917c733092
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
include/ws_functions.inc.php
View file

@ -20,7 +20,8 @@ function ws_isInvokeAllowed($res, $methodName, $params)
}
if ( !is_autorize_status(ACCESS_GUEST) and
strpos($methodName,'pwg.session.')!==0 )
strpos($methodName,'pwg.session.')!==0 and
'pwg.images.uploadAsync'!=$methodName )
{
return new PwgError(401, 'Access denied');
}