lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

utilisation de accessforbidden

Browse Source
This commit is contained in:
Rodolphe Quiedeville 2003-08-06 12:28:02 +00:00
parent a13b1340cc
commit 89f3447cf7
1 changed files with 4 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
htdocs/product/index.php3
View File

@ -22,6 +22,10 @@
require("./pre.inc.php3"); require("./pre.inc.php3");
$user->getrights('produit'); $user->getrights('produit');
if (!$user->rights->produit->lire)
accessforbidden();
if (strlen($type) == 0) if (strlen($type) == 0)
{ {
$type = 0; $type = 0;
@ -66,13 +70,6 @@ if ($action == 'update')
$sql .= " AND lower(p.label) like '%".strtolower($snom)."%'"; $sql .= " AND lower(p.label) like '%".strtolower($snom)."%'";
} }
if ($user->rights->produit->lire == 0)
{
// sécurité
$sql .= " AND 1 = 2";
}
$sql .= " ORDER BY $sortfield $sortorder "; $sql .= " ORDER BY $sortfield $sortorder ";
$sql .= $db->plimit($limit + 1 ,$offset); $sql .= $db->plimit($limit + 1 ,$offset);
$result = $db->query($sql) ; $result = $db->query($sql) ;