fixed captcha security issue

This commit is contained in:
hnhx 2022-05-29 21:21:19 +02:00
parent cb40eb8178
commit 17d32c0f93
1 changed files with 1 additions and 1 deletions

View File

@ -64,7 +64,7 @@
$valid_upload = true;
$content = htmlspecialchars(trim($_REQUEST["content"]));
if ($_SESSION["captcha"] != strtoupper($_REQUEST["captcha"]))
if (empty($_SESSION["captcha"]) || $_SESSION["captcha"] != strtoupper($_REQUEST["captcha"]))
{
if (!in_array($_REQUEST["api_key"], $api_keys))