valvin
/
ttrss
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

rpc/checkforupdates: restrict to administrative access level

This commit is contained in:
Andrew Dolgov 2018-12-16 19:08:41 +03:00
parent 957c44d177
commit 5c481fb249
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
classes/rpc.php
View File

@ -601,7 +601,7 @@ class RPC extends Handler_Protected {
function checkforupdates() { function checkforupdates() {
$rv = []; $rv = [];
if (CHECK_FOR_UPDATES && defined("GIT_VERSION_TIMESTAMP")) { if (CHECK_FOR_UPDATES && $_SESSION["access_level"] >= 10 && defined("GIT_VERSION_TIMESTAMP")) {
$content = @fetch_file_contents(["url" => "https://tt-rss.org/version.json"]); $content = @fetch_file_contents(["url" => "https://tt-rss.org/version.json"]);
if ($content) { if ($content) {