mirror of
https://github.com/alextselegidis/easyappointments.git
synced 2024-11-10 10:02:33 +03:00
Check the role slug in Api.php
This commit is contained in:
parent
f0e976c9ac
commit
63dbb51dec
1 changed files with 3 additions and 1 deletions
|
@ -77,7 +77,9 @@ class Api {
|
||||||
|
|
||||||
$password = $_SERVER['PHP_AUTH_PW'];
|
$password = $_SERVER['PHP_AUTH_PW'];
|
||||||
|
|
||||||
if ( ! $this->CI->accounts->check_login($username, $password))
|
$userdata = $this->CI->accounts->check_login($username, $password);
|
||||||
|
|
||||||
|
if (empty($userdata['role_slug']) || $userdata['role_slug'] !== DB_SLUG_ADMIN)
|
||||||
{
|
{
|
||||||
throw new RuntimeException('The provided credentials do not match any admin user!', 401, 'Unauthorized');
|
throw new RuntimeException('The provided credentials do not match any admin user!', 401, 'Unauthorized');
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue