limit user data sent to frontend

This commit is contained in:
Andrew Dolgov 2021-03-02 13:29:54 +03:00
parent d4ad483add
commit 08ff629af5
1 changed files with 1 additions and 0 deletions

View File

@ -6,6 +6,7 @@ class Pref_Users extends Handler_Administrative {
function edit() {
$user = ORM::for_table('ttrss_users')
->select_expr("id,login,access_level,email,full_name,otp_enabled")
->find_one((int)$_REQUEST["id"])
->as_array();