Security: Message: Block anonymous users to get count of messages

AngelFQC · AngelFQC · commit bef68ffe0552 · 2024-03-15T17:59:48.000-05:00
diff --git a/main/inc/ajax/message.ajax.php b/main/inc/ajax/message.ajax.php
@@ -36,6 +36,7 @@
         }
         break;
     case 'get_count_message':
+        api_block_anonymous_users(false);
         $userId = api_get_user_id();
         $invitations = MessageManager::getMessagesCountForUser($userId);
         header('Content-type:application/json');

Original file line number	Diff line number	Diff line change
`@@ -36,6 +36,7 @@`
`36`	`36`	`}`
`37`	`37`	`break;`
`38`	`38`	`case 'get_count_message':`
	`39`	`+ api_block_anonymous_users(false);`
`39`	`40`	`$userId = api_get_user_id();`
`40`	`41`	`$invitations = MessageManager::getMessagesCountForUser($userId);`
`41`	`42`	`header('Content-type:application/json');`