public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-22 23:11:28 +00:00
Code Issues Releases Wiki Activity

rpc/checkforupdates: restrict to administrative access level

Browse Source
This commit is contained in:
Andrew Dolgov
2018-12-16 19:08:41 +03:00
parent 957c44d177
commit 5c481fb249
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
classes/rpc.php
View File

@@ -601,7 +601,7 @@ class RPC extends Handler_Protected {
function checkforupdates() { function checkforupdates() {
$rv = []; $rv = [];
if (CHECK_FOR_UPDATES && defined("GIT_VERSION_TIMESTAMP")) { if (CHECK_FOR_UPDATES && $_SESSION["access_level"] >= 10 && defined("GIT_VERSION_TIMESTAMP")) {
$content = @fetch_file_contents(["url" => "https://tt-rss.org/version.json"]); $content = @fetch_file_contents(["url" => "https://tt-rss.org/version.json"]);
if ($content) { if ($content) {