Changeset 2709:d70f7e2cb2c9

Timestamp:

05/15/14 08:35:38 (11 years ago)

Author:

Dsls

Branch:

2.6

Children:

2710:f99841305743, 2712:121f94747a10

Message:

Strenghened xmlrpc auth, categories warning.

Many, many thanks to Egidio Romano for the advice.

Files:

• admin/categories.php (modified) (1 diff)
• inc/core/class.dc.xmlrpc.php (modified) (1 diff)

admin/categories.php

@@ -73 +73 @@
 
      foreach ($categories as $category) {
-          if (!empty($category->item_id)) {
+          if (!empty($category->item_id) && !empty($category->left) && !empty($category->right)) {
                $core->blog->updCategoryPosition($category->item_id, $category->left, $category->right);
           }

inc/core/class.dc.xmlrpc.php

@@ -264 +264 @@
      private function setUser($user_id,$pwd)
      {
-          if ($this->core->auth->userID() == $user_id) {
-               return true;
-          }
-
-          if ($this->core->auth->checkUser($user_id,$pwd) !== true) {
+          if (empty($pwd) || $this->core->auth->checkUser($user_id,$pwd) !== true) {
                throw new Exception('Login error');
           }