Input validation fix
Ylian Saint-Hilaire committed
Mar 23, 2020 at 13:34 UTC
4c8a66c9d1e2e38f9305f0307ae25b2086882450
1 file changed
+2
-1
meshcentral.js
+2
-1
@@ -617,7 +617,8 @@ function CreateMeshCentralServer(config, args) {
617
});
618
return;
619
}
620
- if (obj.args.adminaccount || (obj.args.resetaccount.startsWith('user/') == false)) {
620
+ if (obj.args.adminaccount) {
621
+ if (obj.args.resetaccount.startsWith('user/') == false) { console.log('Invalid userid, usage: --adminaccount [userid].'); process.exit(); return; }
622
obj.db.Get(obj.args.adminaccount, function (err, docs) {
623
if ((err != null) || (docs == null) || (docs.length == 0)) { console.log('Unknown userid, usage: --adminaccount [userid].'); process.exit(); return; }
624
docs[0].siteadmin = 0xFFFFFFFF; // Set user as site administrator