Dont error when stats update token is empty, instead throw unautorize…

…d exception
krazzer · Aug 15, 2023 · ed00b94 · ed00b94
1 parent ff07f15
commit ed00b94
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/src/Controllers/StatisticsController.php b/src/Controllers/StatisticsController.php
@@ -49,11 +49,11 @@ public function getVisitorsAction(): string
     }
 
     /**
-     * Update statistics data from google analytics
+     * Update statistics data from Google Analytics
      */
     public function updateAction()
     {
-        $token = $this->request->getPost('token');
+        $token = (string) $this->request->getPost('token', 'string');
 
         $this->cmsService->checkSecurityToken($token);
 

diff --git a/src/Services/Cms/CmsService.php b/src/Services/Cms/CmsService.php
@@ -195,7 +195,7 @@ public function createSecurityToken(): string
      */
     public function checkSecurityToken(string $token)
     {
-        if ( ! $this->keyValue->has($token)) {
+        if ( ! $token || ! $this->keyValue->has($token)) {
             throw new UnauthorizedException();
         }