release 1.3.21

2022-12-18 13:13:44 +01:00
parent d2cb86e323
commit b96e32b713
35 changed files with 359 additions and 122 deletions
--- a/api/index.php
+++ b/api/index.php
@@ -14,7 +14,7 @@ header("Content-Type: application/json; charset=UTF-8");
 if (isset($_GET['apikey'])) {
 	$matchkey = 0;
 	foreach($cfg['stats_api_keys'] as $apikey => $desc) {
-		if ($apikey == $_GET['apikey']) $matchkey = 1;
+		if (hash_equals($apikey, $_GET['apikey'])) $matchkey = 1;
 	}
 	if ($matchkey == 0) {
 		$json = array(