adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-07-05 09:22:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

fixes #1344 add auth exception for pwg.images.uploadAsync

Browse Source 
This method handles its own authentication and can be called by an anonymous request. Thus it should not be blocked by a $conf[guest_access] setting set to false.
This commit is contained in:
plegall
2021-03-05 16:35:09 +01:00
parent e64acd03c5
commit 917c733092
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/ws_functions.inc.php
+2 -1
View File
@@ -20,7 +20,8 @@ function ws_isInvokeAllowed($res, $methodName, $params)
} }
if ( !is_autorize_status(ACCESS_GUEST) and if ( !is_autorize_status(ACCESS_GUEST) and
strpos($methodName,'pwg.session.')!==0 ) strpos($methodName,'pwg.session.')!==0 and
'pwg.images.uploadAsync'!=$methodName )
{ {
return new PwgError(401, 'Access denied'); return new PwgError(401, 'Access denied');
} }