From d67571fcb38c4b3be5d8c6611768e5014c94d684 Mon Sep 17 00:00:00 2001 From: Max Pozdeev Date: Wed, 22 Sep 2021 14:07:56 +0300 Subject: [PATCH] - use token header from $_SERVER; fixed errors with auth token headers occured on some software configurations (cherry picked from commit 5b3dd0d0fc5bd548d89a061b1ddf8c6d8b965793) --- src/init.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/init.php b/src/init.php index 659af98..ac33265 100644 --- a/src/init.php +++ b/src/init.php @@ -131,8 +131,8 @@ function check_token() { $token = access_token(); if ($token == '') return true; - $headers = getallheaders(); - if (!isset($headers['MTT-Token']) || $headers['MTT-Token'] != $token) { + if (!isset($_SERVER)) return true; + if (!isset($_SERVER['HTTP_MTT_TOKEN']) || $_SERVER['HTTP_MTT_TOKEN'] != $token) { die("Access denied! Try to reload the page."); } }