fix vuln: anyone can create staff account with URL.

TIS2023-FMFI / robocup

Prihlasovanie účastníkov na RoboCup Junior Slovensko

The Unlicense

2 stars 0 forks source link

fix vuln: anyone can create staff account with URL. #61

Open FiiL123 opened 1 month ago

FiiL123 commented 1 month ago

Any one was able to reach /create_staff_account and create a staff account for anyone and also upload results for a category. Please re-deploy ASAP.

pavelpetrovic commented 1 month ago

Thanks. Temporarily I have fixed it manually in this file directly on the computer, because I will need more time to pull the recent changes made by the rest of the team than I have now.