Commit 4d365c9d authored by Mark Harding's avatar Mark Harding

(chore): play it safe, ensure carousel file passes through ACL

No related merge requests found
Pipeline #71798024 passed with stages
in 7 minutes and 38 seconds
......@@ -190,7 +190,7 @@ class channel implements Interfaces\Api
'src'=> Core\Config::build()->cdn_url . "fs/v1/banners/$item->guid/fat/$item->last_updated"
);
if (is_uploaded_file($_FILES['file']['tmp_name'])) {
if ($item->canEdit() && is_uploaded_file($_FILES['file']['tmp_name'])) {
$manager->setImage($_FILES['file']['tmp_name'])
->autorotate()
->resize(2000, 10000);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment