* Check privilage.

2015-11-09 16:02:07 +08:00
parent 3478a9010f
commit 225270d39b
1 changed files with 2 additions and 0 deletions
--- a/module/sso/control.php
+++ b/module/sso/control.php
@@ -127,6 +127,8 @@ class sso extends control
     */
    public function ajaxSetConfig()
    {
+        if(!common::hasPriv('admin', 'sso')) die('fail');
+
        if($_POST)
        {
            $ssoConfig = new stdclass();