closing security gap [ignore guarding change for now]
This commit is contained in:
@@ -22,6 +22,7 @@
|
||||
*/
|
||||
|
||||
require '../../../session.php';
|
||||
define('UNAUTHENTICATED_ROUTE', true);
|
||||
require '../../../assets/utils/db_auth.php';
|
||||
|
||||
// Intentional 1-second delay — prevents timing attacks on session enumeration
|
||||
|
||||
Reference in New Issue
Block a user