From: Alexander Ebert <ebert@woltlab.com>
Date: Wed, 31 Jan 2018 12:36:25 +0000 (+0100)
Subject: Missing check for accessible versions
X-Git-Tag: 3.1.0_RC_3~5^2~8
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=9a5b47974e624f82283cbb7bb7fea21192814956;p=GitHub%2FWoltLab%2FWCF.git

Missing check for accessible versions
---

diff --git a/wcfsetup/install/files/lib/system/package/PackageUpdateDispatcher.class.php b/wcfsetup/install/files/lib/system/package/PackageUpdateDispatcher.class.php
index 862b5b9f27..56d7302cde 100644
--- a/wcfsetup/install/files/lib/system/package/PackageUpdateDispatcher.class.php
+++ b/wcfsetup/install/files/lib/system/package/PackageUpdateDispatcher.class.php
@@ -751,11 +751,13 @@ class PackageUpdateDispatcher extends SingletonFactory {
 			ON		(pus.packageUpdateServerID = pu.packageUpdateServerID)
 			WHERE		pu.package = ?
 					AND puv.packageVersion = ?
+					AND puv.isAccessible = ?
 					AND pus.isDisabled = ?";
 		$statement = WCF::getDB()->prepareStatement($sql);
 		$statement->execute([
 			$package,
 			$version,
+			1,
 			0
 		]);
 		$versions = $statement->fetchAll(\PDO::FETCH_ASSOC);