From 3a12e83e96a540c567ddeeb33d2cbe0edc3c7be5 Mon Sep 17 00:00:00 2001 From: Starbeamrainbowlabs Date: Thu, 9 Jul 2020 00:15:54 +0100 Subject: [PATCH] Security: Fix logic in page-debug --- modules/page-debug-info.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/page-debug-info.php b/modules/page-debug-info.php index e1fd29b..29a940c 100644 --- a/modules/page-debug-info.php +++ b/modules/page-debug-info.php @@ -1,7 +1,7 @@ "Debug Information", - "version" => "0.2", + "version" => "0.3", "author" => "Starbeamrainbowlabs", "description" => "Adds a debug action for administrator use only that collects a load of useful information to make reporting bugs easier.", "id" => "page-debug-info", @@ -29,7 +29,7 @@ register_module([ global $settings, $env, $paths, $version, $commit; header("content-type: text/plain"); - if(!$env->is_admin && (isset($_GET["secret"]) && $_GET["secret"] !== $settings->secret)) { + if(!$env->is_admin && (!isset($_GET["secret"]) && $_GET["secret"] !== $settings->secret)) { exit("You must be logged in as an moderator in order to generate debugging information."); }