lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Protection de l'accs la config par la fonction accessforbidden.

Browse Source
This commit is contained in:
Laurent Destailleur 2004-02-28 17:30:49 +00:00
parent 20994125c2
commit 411fe42634
1 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
htdocs/admin/propale.php
View File

@ -21,6 +21,10 @@
*/ */
require("./pre.inc.php"); require("./pre.inc.php");
if (!$user->admin)
accessforbidden();
if ($action == 'nbprod' && $user->admin) if ($action == 'nbprod' && $user->admin)
{ {
$sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'PROPALE_NEW_FORM_NB_PRODUCT', value='".$value."', visible=0"; $sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'PROPALE_NEW_FORM_NB_PRODUCT', value='".$value."', visible=0";
@ -35,12 +39,6 @@ if ($action == 'nbprod' && $user->admin)
llxHeader(); llxHeader();
if (!$user->admin)
{
print "Forbidden";
llxfooter();
exit;
}
if ($action == 'set') if ($action == 'set')
{ {