瀏覽代碼

fix non admin from changing password

CauseFX 5 年之前
父節點
當前提交
90760e4c82
共有 1 個文件被更改,包括 1 次插入 和 1 次删除
  1. 1 1
      api/classes/organizr.class.php

+ 1 - 1
api/classes/organizr.class.php

@@ -5161,7 +5161,7 @@ class Organizr
 			$this->setAPIResponse('error', 'Id was not supplied', 422);
 			$this->setAPIResponse('error', 'Id was not supplied', 422);
 			return false;
 			return false;
 		}
 		}
-		if ($id !== $this->user['userID']) {
+		if ((int)$id !== $this->user['userID']) {
 			if (!$this->qualifyRequest('1', true)) {
 			if (!$this->qualifyRequest('1', true)) {
 				return false;
 				return false;
 			}
 			}