Chart generator bypass security if server request

2023-10-11 12:44:41 +02:00 · 2023-10-11 12:44:41 +02:00 · d3a6edc9cf
parent 44fa1c5cdc
commit d3a6edc9cf
1 changed files with 2 additions and 1 deletions
--- a/pandora_console/include/chart_generator.php
+++ b/pandora_console/include/chart_generator.php
@ -66,13 +66,14 @@ global $config;
 // Care whit this!!! check_login not working if you remove this.
 $config['id_user'] = $id_user;
 $_SESSION['id_usuario'] = $id_user;
+
 if (!isset($config[$slicebar])) {
    $config[$slicebar] = $slicebar_value;
 }

 // Try to initialize session using existing php session id.
 $user = new PandoraFMS\User(['phpsessionid' => $session_id]);
-if (check_login(false) === false) {
+if (check_login(false) === false && $config['server_unique_identifier'] == ! $_SESSION['id_usuario']) {
    // Error handler.
    ?>
 <!DOCTYPE html>