xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-09 21:01:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Important security fix

Browse Source 
Important security fix
This commit is contained in:
novgorodschi catalin
2026-08-05 10:39:38 +03:00
parent 94f5593f22
commit ae2d835a84
5 changed files with 40 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Profile.php
+2 -2
View File
@@ -469,7 +469,7 @@ class Profile {
exit;
}
if ($get['a'] == $session->checker) {
if (hash_equals((string) $session->checker, (string) ($get['a'] ?? ''))) {
if ($session->userinfo['sit' . $type] == $get['id']) {
$database->updateUserField($session->uid, "sit" . $type, 0, 1);
@@ -503,7 +503,7 @@ class Profile {
private function removeMeSit($get) {
global $database, $session;
if ($get['a'] == $session->checker) {
if (hash_equals((string) $session->checker, (string) ($get['a'] ?? ''))) {
$database->removeMeSit($get['id'], $session->uid);
$session->changeChecker();
}