lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Secu: Certaines pages sur les prlvement n'taient pas protges par les droits

Browse Source
This commit is contained in:
Laurent Destailleur 2005-08-13 16:44:52 +00:00
parent 18a5cf1bfd
commit dbae3ee1f8
2 changed files with 21 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
htdocs/compta/prelevement/demandes.php
View File

@ -29,6 +29,9 @@
require("./pre.inc.php");
require_once DOL_DOCUMENT_ROOT."/includes/modules/modPrelevement.class.php";
if (!$user->rights->prelevement->bons->lire)
accessforbidden();
$langs->load("widthdrawals");
if ($user->societe_id > 0)

27
htdocs/compta/prelevement/stats.php
View File

@ -1,5 +1,6 @@
<?PHP
/* Copyright (C) 2005 Rodolphe Quiedeville <rodolphe@quiedeville.org>
* Copyright (C) 2005 Laurent Destailleur <eldy@users.sourceforge.net>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
@ -17,15 +18,23 @@
*
* $Id$
* $Source$
*
*/
/**
\file htdocs/compta/prelevement/stats.php
\brief Page de stats des prélèvements
\version $Revision$
*/
require("./pre.inc.php");
/*
* Sécurité accés client
*/
if (!$user->rights->prelevement->bons->lire)
accessforbidden();
// Sécurité accés client
if ($user->societe_id > 0) accessforbidden();
llxHeader('','Statistiques prélèvements');
/*
@ -67,7 +76,7 @@ if ($db->query($sql))
$i = 0;
print"\n<!-- debut table -->\n";
print '<table class="noborder" width="100%" cellspacing="0" cellpadding="4">';
print '<table class="noborder" width="100%">';
print '<tr class="liste_titre">';
print '<td width="30%">Statut</td><td align="center">Nombre</td><td align="right">% en nombre</td>';
print '<td align="right">Montant</td><td align="right">% en montant</td></tr>';
@ -113,7 +122,7 @@ if ($db->query($sql))
}
else
{
print $db->error() . ' ' . $sql;
dolibarr_print_error($db);
}
/*
*
@ -158,7 +167,7 @@ if ($db->query($sql))
$i = 0;
print"\n<!-- debut table -->\n";
print '<table class="noborder" width="100%" cellspacing="0" cellpadding="4">';
print '<table class="noborder" width="100%">';
print '<tr class="liste_titre">';
print '<td width="30%">Statut</td><td align="center">Nombre</td>';
print '<td align="right">% en nombre</td><td align="right">Montant</td><td align="right">% en montant</td></tr>';
@ -202,11 +211,11 @@ if ($db->query($sql))
}
else
{
print $db->error() . ' ' . $sql;
dolibarr_print_error($db);
}
$db->close();
llxFooter("<em>Derni&egrave;re modification $Date$ r&eacute;vision $Revision$</em>");
llxFooter('$Date$ - $Revision$');
?>