limit user data sent to frontend

2021-03-02 13:29:54 +03:00 · 2021-03-02 13:29:54 +03:00 · 08ff629af5
parent d4ad483add
commit 08ff629af5
1 changed files with 1 additions and 0 deletions
--- a/classes/pref/users.php
+++ b/classes/pref/users.php
@ -6,6 +6,7 @@ class Pref_Users extends Handler_Administrative {

 		function edit() {
 			$user = ORM::for_table('ttrss_users')
+				->select_expr("id,login,access_level,email,full_name,otp_enabled")
 				->find_one((int)$_REQUEST["id"])
 				->as_array();