mirror/postfixadmin
0
0
Fork 0
mirror of https://github.com/postfixadmin/postfixadmin.git synced 2024-09-19 19:22:14 +02:00
Code

fix deletion of app password - see #800

Browse Source
This commit is contained in:
David Goodwin 2024-02-05 20:30:31 +00:00
parent 45557a6ed4
commit 64c34b2c0a
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
public/users/app-passwords.php
View File

@ -126,9 +126,9 @@ function revokeAppPassword(string $username, int $fAppId, array $PALANG)
{
// $username should be from $_SESSION and not modifiable by the end user
// we don't want someone to be able to delete someone else's app password by guessing an id...
$rows = db_query('SELECT id FROM mailbox_app_password WHERE id = :id AND username = :username', ['username' => $username, 'id' => $fAppId]);
if (!empty($rows)) {
$result = db_delete('mailbox_app_password', 'id', $rows[0]['id']);
$row = db_query_one('SELECT id FROM mailbox_app_password WHERE id = :id AND username = :username', ['username' => $username, 'id' => $fAppId]);
if (is_array($row) && isset($row['id'])) {
$result = db_delete('mailbox_app_password', 'id', $row['id']);
if ($result == 1) {
flash_info($PALANG['pTotp_exceptions_revoked']);
return;