Reviewed. This is OK.

Revert "may be exploitable in current form - awaiting review" This reverts commit 7bff60edac.
2017-09-03 00:59:51 -07:00
parent 7bff60edac
commit 499b7de0d2
3 changed files with 1 additions and 6 deletions
--- a/include/api_auth.php
+++ b/include/api_auth.php
@@ -85,8 +85,7 @@ function api_login(&$a){
 					else {
 						continue;
 					}
-// requires security review
-$record = null;
+
 					if($record) {					
 						$verified = \Zotlabs\Web\HTTPSig::verify('',$record['channel']['channel_pubkey']);
 						if(! ($verified && $verified['header_signed'] && $verified['header_valid'])) {