Move out the authorization checks

Author: mastacontrola

packages/web/lib/fog/system.class.php

@@ -53,7 +53,7 @@ private static function _versionCompare()
     public function __construct()
     {
         self::_versionCompare();
-        define('FOG_VERSION', '1.5.10.1720');
+        define('FOG_VERSION', '1.5.10.1721');
         define('FOG_SCHEMA', 273);
         define('FOG_BCACHE_VER', 141);
         define('FOG_CLIENT_VERSION', '0.13.0');

packages/web/management/languages/fr_FR.UTF-8/LC_MESSAGES/messages.po

@@ -4991,8 +4991,8 @@ msgstr "Snapin ajouté !"
 
 msgid "Snapin file is too big, increase post_max_size in php.ini."
 msgstr ""
-"Le fichier Snapin est trop gros, augmentez post_max_size dans le fichier php."
-"ini."
+"Le fichier Snapin est trop gros, augmentez post_max_size dans le fichier "
+"php.ini."
 
 msgid "Snapin is invalid"
 msgstr "Snapin n'est pas valide"

packages/web/status/kernelvers.php

@@ -20,14 +20,15 @@
  * @link     https://fogproject.org
  */
 require '../commons/base.inc.php';
-FOGCore::checkAuthAndCSRF();
 session_write_close();
 ignore_user_abort(true);
 set_time_limit(0);
 header('Content-Type: text/event-stream');
 
 if (isset($_POST['url'])) {
     // Prevent an unauthenticated user from making arbitrary requests.
+    FOGCore::checkAuthAndCSRF();
+
     $url = filter_input(INPUT_POST, 'url');
     if (!$url || !filter_var($url, FILTER_VALIDATE_URL)) {
         http_response_code(400);