beenull/opentrashmail
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Update api.php

Browse source 
Add $admincheck to store a complete copy of $email. 
$email appears to be overwritten during the check if the var is empty. 
now the admin check compares the complete email against the one from the config file.
This commit is contained in:
manfromafar 2021-11-29 14:24:32 -07:00 committed by GitHub
parent cb50641bc4
commit 3d072d22c5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
web/api.php
View file

@ -16,6 +16,11 @@ else $url = array_filter(explode('/',ltrim(parse_url($_SERVER['REQUEST_URI'], PH
$action = strtolower($_REQUEST['a']);
$email = strtolower($_REQUEST['email']);
// quick hack to get admin email working.
// by the time $email is checked its been over written.
// store a copy in $admincheck to compare later.
$admincheck = $email
if(!empty($email)){
if(!filter_var($email, FILTER_VALIDATE_EMAIL)){
// email param provided, but invalid: skip action and show invalid email error
@ -87,7 +92,7 @@ switch($action)
case 'list':
$settings = loadSettings();
if($settings['ADMIN'] && $settings['ADMIN']==$email)
if($settings['ADMIN'] && $settings['ADMIN']==$admincheck)
{
$o['status'] = 'ok';
$o['type'] = 'admin';
@ -131,4 +136,4 @@ switch($action)
break;
}
echo json_encode($o);
echo json_encode($o);