浏览代码

Fix bug allowing cache reset without reset permission

The permission check for non-ajax reset request was checking for allow_invalidate rather than the correct allow_reset.
Nate Bessette 10 年之前
父节点
当前提交
3b9b50afab
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      index.php

+ 1 - 1
index.php

@@ -68,7 +68,7 @@ class OpCacheService
                 echo json_encode($self->getData((empty($_GET['section']) ? null : $_GET['section'])));
             }
             exit;
-        } else if (isset($_GET['reset']) && $self->getOption('allow_invalidate')) {
+        } else if (isset($_GET['reset']) && $self->getOption('allow_reset')) {
             $self->resetCache();
         } else if (isset($_GET['invalidate']) && $self->getOption('allow_invalidate')) {
             $self->resetCache($_GET['invalidate']);