added check if perm exists in is_allowed()

emreakay · Mar 22, 2018 · 8fff679 · 8fff679
1 parent 9becdd3
commit 8fff679
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/application/libraries/Aauth.php b/application/libraries/Aauth.php
@@ -1692,7 +1692,9 @@ public function is_allowed($perm_par, $user_id=FALSE){
 			return true;
 		}
 
-		$perm_id = $this->get_perm_id($perm_par);
+		if ( ! $perm_id = $this->get_perm_id($perm_par)) {
+			return FALSE;
+		}
 
 		$query = $this->aauth_db->where('perm_id', $perm_id);
 		$query = $this->aauth_db->where('user_id', $user_id);