From d373c1f978b4e4aae0b17ae696e73d46ffd40aee Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Fri, 14 Mar 2025 11:32:46 +0300 Subject: add Config::DISABLE_LOGIN_FORM to allow limiting logins to SSO providers --- classes/Handler_Public.php | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'classes/Handler_Public.php') diff --git a/classes/Handler_Public.php b/classes/Handler_Public.php index efa26646b..abff08376 100644 --- a/classes/Handler_Public.php +++ b/classes/Handler_Public.php @@ -431,6 +431,13 @@ class Handler_Public extends Handler { } function forgotpass(): void { + if (Config::get(Config::DISABLE_LOGIN_FORM) || !str_contains(Config::get(Config::PLUGINS), "auth_internal")) { + header($_SERVER["SERVER_PROTOCOL"]." 403 Forbidden"); + echo "Forbidden."; + + return; + } + startup_gettext(); session_start(); -- cgit v1.2.3-54-g00ecf