fix: missing authentication check (#133)

docs: add security policy
2024-02-20 17:44:25 +01:00
parent 087f757248
commit b887d3a050
3 changed files with 41 additions and 1 deletions
@@ -4,6 +4,13 @@ require_once '../../includes/connect_endpoint.php';

 session_start();

+if (!isset($_SESSION['loggedin']) || $_SESSION['loggedin'] !== true) {
+    die(json_encode([
+        "success" => false,
+        "message" => translate('session_expired', $i18n)
+    ]));
+}
+
 require_once '../../includes/getdbkeys.php';

 $query = "SELECT * FROM subscriptions";