lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: access forbidden if rowid is empty

Browse Source
This commit is contained in:
Regis Houssin 2012-02-27 17:36:27 +01:00
parent 0bae0148c1
commit 4bec281dd8
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
htdocs/adherents/fiche.php
View File

@ -56,7 +56,7 @@ $typeid=GETPOST('typeid','int');
$userid=GETPOST('userid','int'); $userid=GETPOST('userid','int');
$socid=GETPOST('socid','int'); $socid=GETPOST('socid','int');
if ($rowid) if ($rowid > 0)
{ {
// Load member // Load member
$result = $object->fetch($rowid); $result = $object->fetch($rowid);
@ -73,6 +73,10 @@ if ($rowid)
|| (($user->id != $adh->user_id) && $user->rights->user->user->password) ); || (($user->id != $adh->user_id) && $user->rights->user->user->password) );
} }
} }
else
{
accessforbidden();
}
// Define variables to know what current user can do on members // Define variables to know what current user can do on members
$canaddmember=$user->rights->adherent->creer; $canaddmember=$user->rights->adherent->creer;