* Fix can bypass permissions.

2023-01-13 06:39:03 +00:00
parent aa2a622208
commit 971133f23d
2 changed files with 3 additions and 1 deletions
@@ -1199,7 +1199,8 @@ class userModel extends model
     */
    public function isLogon()
    {
-        return ($this->session->user and $this->session->user->account != 'guest');
+        $user = $this->session->user;
+        return ($user and !empty($user->account) and $user->account != 'guest');
    }

    /**