yanyu/v2board
1
0
Fork 0
mirror of https://github.com/v2board/v2board.git synced 2025-10-31 17:31:49 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #377 from wloot/patch-6

Browse Source 
[security] Fix user info leak in getSubscribe()
This commit is contained in:
tokumeikoi
2021-01-07 17:16:07 +09:00
committed by GitHub
parent be146bc98b dd51daf9d8
commit 633b9ad912
1 changed files with 23 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
app/Http/Controllers/User/UserController.php
View File

@@ -27,6 +27,9 @@ class UserController extends Controller
public function changePassword(UserChangePassword $request)
{
$user = User::find($request->session()->get('id'));
if (!$user) {
abort(500, '该用户不存在');
}
if (!Helper::multiPasswordVerify(
$user->password_algo,
$request->input('old_password'),
@@ -65,6 +68,9 @@ class UserController extends Controller
'telegram_id'
])
->first();
if (!$user) {
abort(500, '该用户不存在');
}
$user['avatar_url'] = 'https://cdn.v2ex.com/gravatar/' . md5($user->email) . '?s=64&d=identicon';
return response([
'data' => $user
@@ -90,7 +96,20 @@ class UserController extends Controller
public function getSubscribe(Request $request)
{
$user = User::find($request->session()->get('id'));
$user = User::where('id', $request->session()->get('id'))
->select([
'id',
'plan_id',
'token',
'expired_at',
'u',
'd',
'transfer_enable'
])
->first();
if (!$user) {
abort(500, '该用户不存在');
}
if ($user->plan_id) {
$user['plan'] = Plan::find($user->plan_id);
if (!$user['plan']) {
@@ -107,6 +126,9 @@ class UserController extends Controller
public function resetSecurity(Request $request)
{
$user = User::find($request->session()->get('id'));
if (!$user) {
abort(500, '该用户不存在');
}
$user->uuid = Helper::guid(true);
$user->token = Helper::guid();
if (!$user->save()) {