tslocum/tinyib
7
7
Fork 2
Code Issues 32 Pull requests 1 Activity

Deny access to disabled accounts

Browse source
This commit is contained in:
Trevor Slocum 2021-04-04 17:12:17 -07:00
parent e92bea8849
commit 03b88dc9fb
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
inc/functions.php
View file

@ -370,7 +370,7 @@ function manageCheckLogIn($requireKey) {
if (isset($_SESSION['tinyib_username']) && isset($_SESSION['tinyib_password'])) {
$a = accountByUsername($_SESSION['tinyib_username']);
if (!empty($a) && $a['password'] == $_SESSION['tinyib_password']) {
if (!empty($a) && $a['password'] == $_SESSION['tinyib_password'] && $a['role'] != TINYIB_DISABLED) {
$account = $a;
$loggedin = true;
if ($account['role'] == TINYIB_SUPER_ADMINISTRATOR || $account['role'] == TINYIB_ADMINISTRATOR) {