mirror of
https://github.com/Cockatrice/Cockatrice.git
synced 2026-01-01 07:27:40 -08:00
fixed server security issue concerning deck deletion
This commit is contained in:
@@ -361,7 +361,7 @@ ResponseCode ServerSocketInterface::cmdDeckDelDir(Command_DeckDelDir *cmd, Comma
|
||||
servatrice->checkSql();
|
||||
|
||||
int basePathId = getDeckPathId(cmd->getPath());
|
||||
if (basePathId == -1)
|
||||
if ((basePathId == -1) || (basePathId == 0))
|
||||
return RespNameNotFound;
|
||||
deckDelDirHelper(basePathId);
|
||||
return RespOk;
|
||||
|
||||
Reference in New Issue
Block a user