From 225270d39bf53cedc5aab25b2d6bdcfcb9d16762 Mon Sep 17 00:00:00 2001 From: daitingting Date: Mon, 9 Nov 2015 16:02:07 +0800 Subject: [PATCH] * Check privilage. --- module/sso/control.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/module/sso/control.php b/module/sso/control.php index 50ecd4192a..6873a2bad4 100644 --- a/module/sso/control.php +++ b/module/sso/control.php @@ -127,6 +127,8 @@ class sso extends control */ public function ajaxSetConfig() { + if(!common::hasPriv('admin', 'sso')) die('fail'); + if($_POST) { $ssoConfig = new stdclass();