From d6ca6ec4ee6f786c9ae5ed08bc5e3962d3dd256e Mon Sep 17 00:00:00 2001
From: Simon Sickle <SimonSickle@users.noreply.github.com>
Date: Thu, 14 Sep 2017 10:22:20 -0500
Subject: [PATCH] Protect the langs api call with the apiKey

---
 htdocs/application/controllers/Api.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/htdocs/application/controllers/Api.php b/htdocs/application/controllers/Api.php
index 0eadc41..e2f7c98 100644
--- a/htdocs/application/controllers/Api.php
+++ b/htdocs/application/controllers/Api.php
@@ -209,6 +209,11 @@ class Api extends Main
 	
 	function langs() 
 	{
+		if (config_item('apikey') != $this->input->get('apikey')) 
+		{
+			die("Invalid API key\n");
+		}
+		
 		$languages = $this->languages->get_languages();
 		echo json_encode($languages);
 	}