From 8bb656a4757cba7b1a01eedb4de654a361b8c932 Mon Sep 17 00:00:00 2001 From: Regis Houssin Date: Fri, 10 Mar 2006 17:21:27 +0000 Subject: [PATCH] bugfix pfff --- htdocs/projet/index.php | 19 ------------------- 1 file changed, 19 deletions(-) diff --git a/htdocs/projet/index.php b/htdocs/projet/index.php index 5d272dd4e3f..0bb5aa95996 100644 --- a/htdocs/projet/index.php +++ b/htdocs/projet/index.php @@ -36,31 +36,12 @@ if (!$user->rights->projet->lire) accessforbidden(); /* * Sécurité accés client */ -$projetid=''; -if ($_GET["id"]) { $projetid=$_GET["id"]; } - -if ($projetid == '') accessforbidden(); if ($user->societe_id > 0) { $socidp = $user->societe_id; } -// Protection restriction commercial -if ($projetid) -{ - $sql = "SELECT sc.fk_soc, p.rowid, p.fk_soc"; - $sql .= " FROM ".MAIN_DB_PREFIX."societe_commerciaux as sc, ".MAIN_DB_PREFIX."projet as p"; - $sql .= " WHERE p.rowid = ".$projetid; - if (!$user->rights->commercial->client->voir && !$socidp) $sql .= " AND sc.fk_soc = p.fk_soc AND fk_user = ".$user->id; - if ($socidp) $sql .= " AND p.fk_soc = ".$socidp; - - if ( $db->query($sql) ) - { - if ( $db->num_rows() == 0) accessforbidden(); - } -} - llxHeader("",$langs->trans("Projects"),"Projet"); print_fiche_titre($langs->trans("ProjectsArea"));