We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 063ca3b + 60c8211 commit 68bb5c4Copy full SHA for 68bb5c4
src/main/java/com/best/hello/controller/IDOR/IDOR2.java
@@ -23,7 +23,7 @@ public String vul() {
23
// 只允许admin用户可以访问管理页面
24
@GetMapping(value = "/safe/admin")
25
public String safe(HttpSession session) {
26
- if (session.getAttribute("LoginUser").equals("admin.")) {
+ if (session.getAttribute("LoginUser").equals("admin")) {
27
return "idoradmin";
28
} else {
29
return "commons/403";
0 commit comments