uploadProject.php can be reached without logging in - Githubissues

fgrardi / smash

0 stars 24 forks source link

uploadProject.php can be reached without logging in #30

Closed iamgoodbytes closed 2 years ago

iamgoodbytes commented 2 years ago

current behaviour

when I am not logged in, I can upload projects

expected behaviour

when I am not logged in, I should not be able to visit https://smash.weareimd.be/uploadProject.php

fix suggestion

redirect the user to login.php when he/she is not logged in and tries to visit uploadProject.php