Commit 887ee0e8 authored by Max-Wilhelm Bruker's avatar Max-Wilhelm Bruker
Browse files

fixed server security issue concerning deck deletion

parent 0a30f22e
...@@ -361,7 +361,7 @@ ResponseCode ServerSocketInterface::cmdDeckDelDir(Command_DeckDelDir *cmd, Comma ...@@ -361,7 +361,7 @@ ResponseCode ServerSocketInterface::cmdDeckDelDir(Command_DeckDelDir *cmd, Comma
servatrice->checkSql(); servatrice->checkSql();
int basePathId = getDeckPathId(cmd->getPath()); int basePathId = getDeckPathId(cmd->getPath());
if (basePathId == -1) if ((basePathId == -1) || (basePathId == 0))
return RespNameNotFound; return RespNameNotFound;
deckDelDirHelper(basePathId); deckDelDirHelper(basePathId);
return RespOk; return RespOk;
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment