[web-bugs] master: Restrict search to logged in users

Author: Derick Rethans (derickr) Date: 2026-03-24T11:43:27Z Commit: https://github.com/php/web-bugs/commit/346df3f81d48d5b503b6bc96c17a2bcc067f2a60 Raw diff: https://github.com/php/web-bugs/commit/346df3f81d48d5b503b6bc96c17a2bcc067f2a60.diff Restrict search to logged in users Changed paths: M www/search.php Diff: diff --git a/www/search.php b/www/search.php index 66910763..f9eddc4a 100644 --- a/www/search.php +++ b/www/search.php @@ -18,6 +18,13 @@ bugs_authenticate($user, $pw, $logged_in, $user_flags); +if ($logged_in === false) { + response_header('Search Restricted'); + display_bug_error("You must be logged in to use search"); + response_footer(); + exit; +} + $is_security_developer = ($user_flags & (BUGS_TRUSTED_DEV | BUGS_SECURITY_DEV)); $newrequest = http_build_query(array_merge($_GET, $_POST));