minicms/core
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

FIX: fix some security issue

Browse Source
This commit is contained in:
Michal Kváček
2016-01-22 12:46:18 +01:00
parent 39855bdbfd
commit 551e1af5fe
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Http/Middleware/Authenticate.php
+3 -3
View File
@@ -17,12 +17,12 @@ class Authenticate
*/ */
public function handle($request, Closure $next, $guard = null) public function handle($request, Closure $next, $guard = null)
{ {
if (Auth::check()) { if (!Auth::check($guard)) {
if ($request->ajax()) { if ($request->ajax()) {
return response('Unauthorized.', 401); return response('Unauthorized.', 401);
} else {
return redirect()->guest('login');
} }
return redirect()->guest('login');
} }
return $next($request); return $next($request);
app/Http/Requests/CreateNewUser.php
+2 -1
View File
@@ -14,7 +14,8 @@ class CreateNewUser extends Request
*/ */
public function authorize() public function authorize()
{ {
return \Auth::$user->role == User::ROLE_ADMIN;
return \Auth::check() && \Auth::$user->role == User::ROLE_ADMIN;
} }
/** /**