fix: added missing authentication check

Author: thorsten

phpmyfaq/src/phpMyFAQ/Controller/Frontend/AutoCompleteController.php

@@ -20,6 +20,7 @@
 use phpMyFAQ\Category;
 use phpMyFAQ\Configuration;
 use phpMyFAQ\Controller\AbstractController;
+use phpMyFAQ\Core\Exception;
 use phpMyFAQ\Faq\FaqPermission;
 use phpMyFAQ\Filter;
 use phpMyFAQ\Helper\SearchHelper;
@@ -34,6 +35,9 @@
 
 class AutoCompleteController extends AbstractController
 {
+    /**
+     * @throws Exception
+     */
     #[Route('api/autocomplete')]
     public function search(Request $request): JsonResponse
     {

phpmyfaq/src/phpMyFAQ/Controller/Frontend/UserController.php

@@ -127,6 +127,8 @@ public function updateData(Request $request): JsonResponse
     #[Route('api/user/password/update', methods: ['PUT'])]
     public function updatePassword(Request $request): JsonResponse
     {
+        $this->userIsAuthenticated();
+
         $configuration = Configuration::getConfigurationInstance();
         $user = CurrentUser::getCurrentUser($configuration);