From 40d09a4ee431d9a12ff4f8f56956b3806dd760bb Mon Sep 17 00:00:00 2001 From: xisi Date: Wed, 15 Jan 2014 11:10:36 -0500 Subject: [PATCH] oops, forgot to make sure we're auth'ed --- public/include/pages/account/edit.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/public/include/pages/account/edit.inc.php b/public/include/pages/account/edit.inc.php index 1100eefd..94a225c4 100644 --- a/public/include/pages/account/edit.inc.php +++ b/public/include/pages/account/edit.inc.php @@ -120,7 +120,7 @@ if ($user->isAuthenticated()) { } } // one last time so we can sync with changes we made during this page -if ($config['twofactor']['enabled']) { +if ($user->isAuthenticated() && $config['twofactor']['enabled']) { if ($config['twofactor']['options']['details']) { $ea_editable = $user->token->isTokenValid($_SESSION['USERDATA']['id'], $ea_token, 5); $ea_sent = $user->token->doesTokenExist('account_edit', $_SESSION['USERDATA']['id']);