Security: Fix logic in page-debug

This commit is contained in:
Starbeamrainbowlabs 2020-07-09 00:15:54 +01:00
parent 8928de9d1f
commit 67fdba2baf
Signed by: sbrl
GPG Key ID: 1BE5172E637709C2
1 changed files with 2 additions and 2 deletions

View File

@ -1,7 +1,7 @@
<?php
register_module([
"name" => "Debug Information",
"version" => "0.2",
"version" => "0.3",
"author" => "Starbeamrainbowlabs",
"description" => "Adds a debug action for administrator use only that collects a load of useful information to make reporting bugs easier.",
"id" => "page-debug-info",
@ -29,7 +29,7 @@ register_module([
global $settings, $env, $paths, $version, $commit;
header("content-type: text/plain");
if(!$env->is_admin && (isset($_GET["secret"]) && $_GET["secret"] !== $settings->secret)) {
if(!$env->is_admin && (!isset($_GET["secret"]) && $_GET["secret"] !== $settings->secret)) {
exit("You must be logged in as an moderator in order to generate debugging information.");
}