diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2017-02-25 12:39:08 +0100 |
|---|---|---|
| committer | Alexandre Alapetite <alexandre@alapetite.fr>
| 2017-02-25 12:39:08 +0100 |
| commit | 271a1fdc8900a8b2c32675c22dce1cc458209de4 (patch) | |
| tree | 10f4e575e3d907b637f60128d270ac9a7576ce46 /p | |
| parent | 2e871a0adf131f53dcf345ad2dda73bdf7c1a2c9 (diff) | |
Missing checkUsername and const patten
https://github.com/FreshRSS/FreshRSS/pull/1423
https://github.com/YunoHost-Apps/freshrss_ynh/issues/27#issuecomment-279792363
Diffstat (limited to 'p')
| -rw-r--r-- | p/api/greader.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/p/api/greader.php b/p/api/greader.php index 4965ffd3b..01eca6d4f 100644 --- a/p/api/greader.php +++ b/p/api/greader.php @@ -152,7 +152,7 @@ function authorizationToUser() { $headerAuthX = explode('/', $headerAuth, 2); if (count($headerAuthX) === 2) { $user = $headerAuthX[0]; - if (ctype_alnum($user)) { + if (FreshRSS_user_Controller::checkUsername($user)) { FreshRSS_Context::$user_conf = get_user_configuration($user); if (FreshRSS_Context::$user_conf == null) { Minz_Log::warning('Invalid API user ' . $user . ': configuration cannot be found.'); |