lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Restricted survey creation to $user->rights->opensurvey->write

Browse Source
This commit is contained in:
Marcos García de La Fuente 2014-01-05 19:13:12 +01:00
parent 048e270fec
commit 0a3a6c0f88
4 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
htdocs/opensurvey/wizard/choix_autre.php
View File

@ -27,6 +27,9 @@ require_once(DOL_DOCUMENT_ROOT."/core/lib/admin.lib.php");
require_once(DOL_DOCUMENT_ROOT."/core/lib/files.lib.php"); require_once(DOL_DOCUMENT_ROOT."/core/lib/files.lib.php");
require_once(DOL_DOCUMENT_ROOT."/opensurvey/fonctions.php"); require_once(DOL_DOCUMENT_ROOT."/opensurvey/fonctions.php");
// Security check
if (!$user->rights->opensurvey->write) accessforbidden ();
/* /*
* Action * Action
*/ */

3
htdocs/opensurvey/wizard/choix_date.php
View File

@ -27,6 +27,9 @@ require_once(DOL_DOCUMENT_ROOT."/core/lib/admin.lib.php");
require_once(DOL_DOCUMENT_ROOT."/core/lib/files.lib.php"); require_once(DOL_DOCUMENT_ROOT."/core/lib/files.lib.php");
require_once(DOL_DOCUMENT_ROOT."/opensurvey/fonctions.php"); require_once(DOL_DOCUMENT_ROOT."/opensurvey/fonctions.php");
// Security check
if (!$user->rights->opensurvey->write) accessforbidden ();
//le format du sondage est DATE //le format du sondage est DATE
$_SESSION["formatsondage"] = "D"; $_SESSION["formatsondage"] = "D";

4
htdocs/opensurvey/wizard/create_survey.php
View File

@ -27,8 +27,10 @@ require_once(DOL_DOCUMENT_ROOT."/core/lib/admin.lib.php");
require_once(DOL_DOCUMENT_ROOT."/core/lib/files.lib.php"); require_once(DOL_DOCUMENT_ROOT."/core/lib/files.lib.php");
require_once(DOL_DOCUMENT_ROOT."/opensurvey/fonctions.php"); require_once(DOL_DOCUMENT_ROOT."/opensurvey/fonctions.php");
$langs->load("opensurvey"); // Security check
if (!$user->rights->opensurvey->write) accessforbidden ();
$langs->load("opensurvey");
// On teste toutes les variables pour supprimer l'ensemble des warnings PHP // On teste toutes les variables pour supprimer l'ensemble des warnings PHP
// On transforme en entites html les données afin éviter les failles XSS // On transforme en entites html les données afin éviter les failles XSS

4
htdocs/opensurvey/wizard/index.php
View File

@ -28,8 +28,10 @@ require_once(DOL_DOCUMENT_ROOT."/core/lib/admin.lib.php");
require_once(DOL_DOCUMENT_ROOT."/core/lib/files.lib.php"); require_once(DOL_DOCUMENT_ROOT."/core/lib/files.lib.php");
require_once(DOL_DOCUMENT_ROOT."/opensurvey/fonctions.php"); require_once(DOL_DOCUMENT_ROOT."/opensurvey/fonctions.php");
$langs->load("opensurvey"); // Security check
if (!$user->rights->opensurvey->write) accessforbidden ();
$langs->load("opensurvey");
/* /*
* View * View