Fixed an issue that allowed some disabled module content to be visible or accessible.

2026-01-07 23:16:36 +01:00
parent 604d71e0e6
commit eb2e4678eb
10 changed files with 97 additions and 37 deletions
--- a/pub/api/v1/servers/index.php
+++ b/pub/api/v1/servers/index.php
@@ -2,6 +2,11 @@

 use api\classes\API_servers;

+if (!$GLOBALS['modules_enabled']['servers']) {
+    echo '405 Not Allowed';
+    exit;
+}
+
 session_start();

 require_once $_SERVER['DOCUMENT_ROOT'] . '/api/classes/API_servers.php';