Fix security vulnerabilities

star7th · Jun 24, 2021 · 49b992d · 49b992d
1 parent 8db2d13
commit 49b992d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/server/Application/Api/Controller/AdminUpdateController.class.php b/server/Application/Api/Controller/AdminUpdateController.class.php
@@ -24,6 +24,8 @@ public function checkUpdate(){
 
     // 下载更新代码包
     public function download(){
+        $this->checkLogin();
+        $this->checkAdmin();
         set_time_limit(1000);
         ini_set('memory_limit','500M');
         $new_version = I("new_version") ;
@@ -78,6 +80,8 @@ public function download(){
 
     // 执行升级操作，升级覆盖文件
     public function updateFiles(){
+        $this->checkLogin();
+        $this->checkAdmin();
         set_time_limit(1000);
         ini_set('memory_limit','500M');