From ca3a9e0895c5aa2fe8c273c08f09438fb0b23e9a Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sun, 24 Jun 2018 10:38:16 +0300
Subject: [PATCH] Security fix for API hash check

---
 web/api/index.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/web/api/index.php b/web/api/index.php
index 3cf0ec2d0..80f72b99e 100644
--- a/web/api/index.php
+++ b/web/api/index.php
@@ -58,6 +58,8 @@ if (isset($_POST['user']) || isset($_POST['hash'])) {
                 echo 'Error: authentication failed';
                 exit;
             }
+        } else {
+            $return_var = 1;
         }
     }