Merge branch 'master' of github.com:digininja/DVWA

digininja · Nov 1, 2023 · f221d07 · f221d07
2 parents d5f0031 + 9b787fc
commit f221d07
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/vulnerabilities/authbypass/change_user_details.php b/vulnerabilities/authbypass/change_user_details.php
@@ -10,6 +10,7 @@
 
 if (dvwaSecurityLevelGet() == "impossible" && dvwaCurrentUser() != "admin") {
 	print json_encode (array ("result" => "fail", "error" => "Access denied"));
+	exit;
 }
 
 if ($_SERVER['REQUEST_METHOD'] != "POST") {

diff --git a/vulnerabilities/authbypass/get_user_data.php b/vulnerabilities/authbypass/get_user_data.php
@@ -9,6 +9,7 @@
 */
 if ((dvwaSecurityLevelGet() == "high" || dvwaSecurityLevelGet() == "impossible") && dvwaCurrentUser() != "admin") {
 	print json_encode (array ("result" => "fail", "error" => "Access denied"));
+	exit;
 }
 
 $query  = "SELECT user_id, first_name, last_name FROM users";