Mirrors/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2026-07-17 16:45:06 +00:00
Code Issues Projects Releases Wiki Activity

add missing access control

Browse source
This commit is contained in:
FreddleSpl0it 2026-03-19 12:41:47 +01:00
parent ed9264fd2a
commit 8a65b9d1c6
No known key found for this signature in database
GPG key ID: 00E14E7634F4BEC5
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
data/web/inc/functions.fwdhost.inc.php
View file

@ -108,6 +108,14 @@ function fwdhost($_action, $_data = null) {
}
break;
case 'delete':
if ($_SESSION['mailcow_cc_role'] != "admin") {
$_SESSION['return'][] = array(
'type' => 'danger',
'log' => array(__FUNCTION__, $_action, $_data_log),
'msg' => 'access_denied'
);
return false;
}
$hosts = (array)$_data['forwardinghost'];
foreach ($hosts as $host) {
try {