lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: security check in user/group

Browse Source
This commit is contained in:
Regis Houssin 2009-05-01 10:24:32 +00:00
parent 37cac65f5a
commit 67377f7729
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/user/fiche.php
View File

@ -52,7 +52,7 @@ if ($_GET["id"])
} }
// Security check // Security check
$result = restrictedArea($user, 'user',$_GET["id"]); $result = restrictedArea($user, 'user', $_GET["id"], '', 'user');
if ($user->id <> $_GET["id"] && ! $canreadperms) accessforbidden(); if ($user->id <> $_GET["id"] && ! $canreadperms) accessforbidden();
$langs->load("users"); $langs->load("users");

2
htdocs/user/group/fiche.php
View File

@ -37,7 +37,7 @@ $langs->load("users");
$langs->load("other"); $langs->load("other");
// Security check // Security check
$result = restrictedArea($user, 'usergroup',$_GET["id"]); $result = restrictedArea($user, 'user', $_GET["id"], '', 'user');
$action=isset($_GET["action"])?$_GET["action"]:$_POST["action"]; $action=isset($_GET["action"])?$_GET["action"]:$_POST["action"];