Browse Source

change strlen($key) to isset($_REQUEST["key"] to fix login problem affecting one system

Mark Crane 11 năm trước cách đây
mục cha
commit
35214bda4d
1 tập tin đã thay đổi với 4 bổ sung4 xóa
  1. 4 4
      resources/check_auth.php

+ 4 - 4
resources/check_auth.php

@@ -187,7 +187,7 @@ require_once "resources/require.php";
 					if ($_SESSION["user"]["unique"]["text"] == "global") {
 					if ($_SESSION["user"]["unique"]["text"] == "global") {
 						//globally unique users
 						//globally unique users
 						$sql = "select * from v_users ";
 						$sql = "select * from v_users ";
-						if (strlen($key) > 0) {
+						if (isset($_REQUEST["key"])) {
 							$sql .= "where api_key=:key ";
 							$sql .= "where api_key=:key ";
 							//$sql .= "where api_key='".$key."' ";
 							//$sql .= "where api_key='".$key."' ";
 						}
 						}
@@ -201,7 +201,7 @@ require_once "resources/require.php";
 					else {
 					else {
 						//unique per domain
 						//unique per domain
 						$sql = "select * from v_users ";
 						$sql = "select * from v_users ";
-						if (strlen($key) > 0) {
+						if (isset($_REQUEST["key"])) {
 							$sql .= "where api_key=:key ";
 							$sql .= "where api_key=:key ";
 							//$sql .= "and api_key='".$key."' ";
 							//$sql .= "and api_key='".$key."' ";
 						}
 						}
@@ -215,7 +215,7 @@ require_once "resources/require.php";
 						$prep_statement = $db->prepare(check_sql($sql));
 						$prep_statement = $db->prepare(check_sql($sql));
 						$prep_statement->bindParam(':domain_uuid', $domain_uuid);
 						$prep_statement->bindParam(':domain_uuid', $domain_uuid);
 					}
 					}
-					if (strlen($key) > 0) {
+					if (isset($_REQUEST["key"])) {
 						$prep_statement->bindParam(':key', $key);
 						$prep_statement->bindParam(':key', $key);
 					}
 					}
 					else {
 					else {
@@ -227,7 +227,7 @@ require_once "resources/require.php";
 						$auth_failed = true;
 						$auth_failed = true;
 					}
 					}
 					else {
 					else {
-						if (strlen($key) > 0) {
+						if (isset($_REQUEST["key"])) {
 							$auth_failed = false;
 							$auth_failed = false;
 						}
 						}
 						else {
 						else {