diff --git a/pandora_console/ajax.php b/pandora_console/ajax.php index b653fbd5c5..7d83d2db7e 100644 --- a/pandora_console/ajax.php +++ b/pandora_console/ajax.php @@ -98,9 +98,8 @@ if (isset($_GET['loginhash']) === true) { } } -$auth_class = io_safe_output( - get_parameter('auth_class', 'PandoraFMS\Dashboard\Manager') -); +// Auth class example: PandoraFMS\Dashboard\Manager. +$auth_class = io_safe_output(get_parameter('auth_class', null)); $public_hash = get_parameter('auth_hash', false); $public_login = false; // Check user. diff --git a/pandora_console/include/functions.php b/pandora_console/include/functions.php index 60f24efdb4..eec93ba6b8 100644 --- a/pandora_console/include/functions.php +++ b/pandora_console/include/functions.php @@ -2240,13 +2240,16 @@ function check_login($output=true) return false; } - // No exists $config. Exit inmediatly + // No exists $config. Exit inmediatly. include 'general/noaccess.php'; exit; } - if ((isset($_SESSION['id_usuario'])) and ($_SESSION['id_usuario'] != '')) { - if (is_user($_SESSION['id_usuario'])) { + if ((isset($_SESSION['id_usuario'])) && ($_SESSION['id_usuario'] != '')) { + if (is_user($_SESSION['id_usuario']) + || (isset($_SESSION['merge-request-user-trick']) === true + && $_SESSION['merge-request-user-trick'] === $_SESSION['id_usuario']) + ) { $config['id_user'] = $_SESSION['id_usuario']; return true; @@ -2544,7 +2547,9 @@ function get_users_acl($id_user) { static $users_acl_cache = []; - if (is_array($users_acl_cache[$id_user])) { + if (isset($users_acl_cache[$id_user]) === true + && is_array($users_acl_cache[$id_user]) === true + ) { $rowdup = $users_acl_cache[$id_user]; } else { $query = sprintf(