fixed server security issue concerning deck deletion
This commit is contained in:
parent
0a30f22e5f
commit
887ee0e86d
1 changed files with 1 additions and 1 deletions
|
@ -361,7 +361,7 @@ ResponseCode ServerSocketInterface::cmdDeckDelDir(Command_DeckDelDir *cmd, Comma
|
|||
servatrice->checkSql();
|
||||
|
||||
int basePathId = getDeckPathId(cmd->getPath());
|
||||
if (basePathId == -1)
|
||||
if ((basePathId == -1) || (basePathId == 0))
|
||||
return RespNameNotFound;
|
||||
deckDelDirHelper(basePathId);
|
||||
return RespOk;
|
||||
|
|
Loading…
Reference in a new issue