gtoriadotnet
/
fobe-web
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

security concern, some moderation pages not restricted

This commit is contained in:
Austin 2021-10-30 05:17:43 -04:00
parent 4dd6d90908
commit 3ac34f1c90
6 changed files with 25 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
html/MCP/chat-logs/index.php
View File

@ -1,5 +1,10 @@
<?php <?php
if(!$user->isStaff())
{
redirect("/");
}
$body = <<<EOT $body = <<<EOT
<h5 class="text-center">Chat Logs</h5> <h5 class="text-center">Chat Logs</h5>
<h5 class="text-center">You can sort by Censored, by username and search for words</h5> <h5 class="text-center">You can sort by Censored, by username and search for words</h5>

5
html/MCP/chat-logs/loggedChats.php
View File

@ -9,6 +9,11 @@ header("Access-Control-Allow-Origin: https://www.alphaland.cc");
header("access-control-allow-credentials: true"); header("access-control-allow-credentials: true");
header('Content-Type: application/json'); header('Content-Type: application/json');
if(!$user->isStaff())
{
redirect("/");
}
//get params //get params
$username = $_GET['username']; $username = $_GET['username'];
$userid = getID($username); $userid = getID($username);

4
html/MCP/invite-logs/index.php
View File

@ -1,8 +1,8 @@
<?php <?php
if(!($user->isStaff())) if(!$user->isStaff())
{ {
die(); redirect("/");
} }
$alert = ''; $alert = '';

5
html/MCP/invite-logs/inviteLogs.php
View File

@ -1,7 +1,8 @@
<?php <?php
if(!($user->isStaff())) { if(!$user->isStaff())
die(); {
redirect("/");
} }
//headers //headers

5
html/MCP/reports/data/index.php
View File

@ -4,6 +4,11 @@ header("Access-Control-Allow-Origin: https://www.alphaland.cc");
header("access-control-allow-credentials: true"); header("access-control-allow-credentials: true");
header('Content-Type: application/json'); header('Content-Type: application/json');
if(!$user->isStaff())
{
redirect("/");
}
$xml = file_get_contents('compress.zlib://PlayerReport.txt'); $xml = file_get_contents('compress.zlib://PlayerReport.txt');
$validXML = true; $validXML = true;

5
html/MCP/reports/view.php
View File

@ -1,5 +1,10 @@
<?php <?php
if(!$user->isStaff())
{
redirect("/");
}
if (!$_GET['id']) if (!$_GET['id'])
{ {
redirect("/MCP/reports/"); redirect("/MCP/reports/");