maketank/Froxlor
2
0
Fork 0
Code Pull Requests Releases Activity

deny api access to deactivated users with valid api-key

Browse Source 
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
This commit is contained in:
Michael Kaufmann
2020-03-06 22:03:41 +01:00
parent 32b6285589
commit cf2c7fa31c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/Froxlor/Api/FroxlorRPC.php
View File

@@ -60,7 +60,7 @@ class FroxlorRPC
FROM `api_keys` ak
LEFT JOIN `panel_admins` a ON a.adminid = ak.adminid
LEFT JOIN `panel_customers` c ON c.customerid = ak.customerid
WHERE `apikey` = :ak AND `secret` = :as
WHERE `apikey` = :ak AND `secret` = :as AND c.deactivated = 0
");
$result = \Froxlor\Database\Database::pexecute_first($sel_stmt, array(
'ak' => $key,