Merge pull request #832 from M0rgan01/fix-v9-context

Improvement for new v9 context
PrestaShop · Aug 6, 2024 · 963d837 · 963d837
2 parents f613730 + 5069cba
commit 963d837
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/controllers/admin/AdminSelfUpgradeController.php b/controllers/admin/AdminSelfUpgradeController.php
@@ -292,6 +292,12 @@ public function init()
             parent::init();
         }
 
+        // V9 context security
+        // After an upgrade we disconnect the user from the session, and the employee context is null.
+        if (!$this->context->employee->id) {
+            return;
+        }
+
         // For later use, let's set up prodRootDir and adminDir
         // This way it will be easier to upgrade a different path if needed
         $this->prodRootDir = _PS_ROOT_DIR_;