diff options
| author | Andrew Dolgov <[email protected]> | 2018-12-16 19:08:41 +0300 |
|---|---|---|
| committer | Andrew Dolgov <[email protected]> | 2018-12-16 19:08:41 +0300 |
| commit | 5c481fb24997fd292c6933b9d1c711e948732414 (patch) | |
| tree | 747820f33ab746dca5255ce7563c0be5475f1938 /classes/rpc.php | |
| parent | 957c44d177e6577e2f3b98560c8f2b67883806d4 (diff) | |
rpc/checkforupdates: restrict to administrative access level
Diffstat (limited to 'classes/rpc.php')
| -rwxr-xr-x | classes/rpc.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/classes/rpc.php b/classes/rpc.php index eb6fd4895..b2184d8ec 100755 --- a/classes/rpc.php +++ b/classes/rpc.php @@ -601,7 +601,7 @@ class RPC extends Handler_Protected { function checkforupdates() { $rv = []; - if (CHECK_FOR_UPDATES && defined("GIT_VERSION_TIMESTAMP")) { + if (CHECK_FOR_UPDATES && $_SESSION["access_level"] >= 10 && defined("GIT_VERSION_TIMESTAMP")) { $content = @fetch_file_contents(["url" => "https://tt-rss.org/version.json"]); if ($content) { |