From 49b6411637afaf81cc0846a84985683f5f716aa9 Mon Sep 17 00:00:00 2001
From: Okhin <okhin@okhin.fr>
Date: Mon, 6 May 2019 15:03:29 +0200
Subject: [PATCH 1/2] Initializing message with a list instead of an empty
 string

---
 www/index.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/www/index.php b/www/index.php
index 3ad2db4..33a865d 100644
--- a/www/index.php
+++ b/www/index.php
@@ -45,10 +45,10 @@ $f3->set('ONERROR', function ($f3) {
 
     // If neither error or message are set, define them
     if (!$f3->exists('SESSION.message')) {
-        $f3->push('SESSION.message', '');
+        $f3->push('SESSION.message', []);
     }
     if (!$f3->exists('SESSION.error')) {
-        $f3->push('SESSION.error', '');
+        $f3->push('SESSION.error', []);
     }
     $f3->get('container')['session']->set('csrf', $csrf);
 
-- 
GitLab


From 88319b6204f7f239d11f71035b014d37c2a3e934 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9mi=20Oudin?= <oudin@crans.org>
Date: Mon, 3 Jun 2019 12:21:07 +0200
Subject: [PATCH 2/2] If not connected, do not allow access to the piplome

---
 app/controller/cron.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/app/controller/cron.php b/app/controller/cron.php
index 48a900f..4591c05 100644
--- a/app/controller/cron.php
+++ b/app/controller/cron.php
@@ -22,6 +22,9 @@ class Cron extends Controller
     {
         // This method is used to generate a piplome. It might be called with an
         // id parameters, in which case we will ask to regenerate a specific piplome.
+        if (!$f3->exists('SESSION.user')) {
+            $f3->reroute('/login');
+        }
         $logger = new \Log("/piplome.log");
         $ids = array();
         $db = $f3->get('DB');
-- 
GitLab