Protection de l'accs la config par la fonction accessforbidden.

This commit is contained in:
Laurent Destailleur 2004-02-28 17:30:49 +00:00
parent 20994125c2
commit 411fe42634

View File

@ -21,6 +21,10 @@
*/
require("./pre.inc.php");
if (!$user->admin)
accessforbidden();
if ($action == 'nbprod' && $user->admin)
{
$sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'PROPALE_NEW_FORM_NB_PRODUCT', value='".$value."', visible=0";
@ -35,12 +39,6 @@ if ($action == 'nbprod' && $user->admin)
llxHeader();
if (!$user->admin)
{
print "Forbidden";
llxfooter();
exit;
}
if ($action == 'set')
{