fix-v9-context

PrestaShop · Jul 31, 2024 · 5069cba · 5069cba
1 parent 7e99c29
commit 5069cba
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/controllers/admin/AdminSelfUpgradeController.php b/controllers/admin/AdminSelfUpgradeController.php
@@ -295,6 +295,12 @@ public function init()
             parent::init();
         }
 
+        // V9 context security
+        // After an upgrade we disconnect the user from the session, and the employee context is null.
+        if (!$this->context->employee->id) {
+            return;
+        }
+
         // For later use, let's set up prodRootDir and adminDir
         // This way it will be easier to upgrade a different path if needed
         $this->prodRootDir = _PS_ROOT_DIR_;