From 5db00743a63623473bc37fac643f2fe4a66c7cf1 Mon Sep 17 00:00:00 2001 From: Austin Date: Fri, 29 Oct 2021 22:10:17 -0400 Subject: [PATCH] Security concern addressed --- html/asset/index.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/asset/index.php b/html/asset/index.php index e00055d..83e5e66 100644 --- a/html/asset/index.php +++ b/html/asset/index.php @@ -50,7 +50,7 @@ if ($id) { if(isLoggedIn()) { - if ($iteminfo->IsPublicDomain == true or $iteminfo->CreatorId == $user->id or $user->isAdmin()) + if ($iteminfo->IsPublicDomain == true or $iteminfo->CreatorId == $user->id or $user->isOwner()) { ReturnAsset($iteminfo->Hash, $iteminfo->AssetTypeId); }