bashclub/piler
1
0
Fork 0
mirror of https://bitbucket.org/jsuto/piler.git synced 2024-11-08 06:51:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

Removed HTTP_REFERER check from index.php

Browse Source 
Signed-off-by: Janos SUTO <sj@acts.hu>
This commit is contained in:
Janos SUTO 2019-02-23 21:48:06 +01:00
parent 8ecaa4443b
commit 421f0c538c
1 changed files with 0 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
webui/index.php
View File

@ -74,10 +74,6 @@ else if($session->get("four_eyes") == 1 && $request->get['route'] != 'login/logo
} }
else if(Registry::get('username')) { else if(Registry::get('username')) {
// Check the Referer header which must be present after we are authenticated
if(!isset($_SERVER['HTTP_REFERER'])) die("missing HTTP_REFERER");
if(strpos($_SERVER['HTTP_REFERER'], SITE_URL) === false) die("invalid HTTP_REFERER");
if(isset($request->get['route'])){ if(isset($request->get['route'])){
$action = new Router($request->get['route']); $action = new Router($request->get['route']);
} }