lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Secu: Certaines pages sur les prlvement n'taient pas protges par les droits

Browse Source
This commit is contained in:
Laurent Destailleur 2005-08-13 16:44:52 +00:00
parent 18a5cf1bfd
commit dbae3ee1f8
2 changed files with 21 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
htdocs/compta/prelevement/demandes.php
View File

@ -29,6 +29,9 @@
require("./pre.inc.php"); require("./pre.inc.php");
require_once DOL_DOCUMENT_ROOT."/includes/modules/modPrelevement.class.php"; require_once DOL_DOCUMENT_ROOT."/includes/modules/modPrelevement.class.php";
if (!$user->rights->prelevement->bons->lire)
accessforbidden();
$langs->load("widthdrawals"); $langs->load("widthdrawals");
if ($user->societe_id > 0) if ($user->societe_id > 0)

27
htdocs/compta/prelevement/stats.php
View File

@ -1,5 +1,6 @@
<?PHP <?PHP
/* Copyright (C) 2005 Rodolphe Quiedeville <rodolphe@quiedeville.org> /* Copyright (C) 2005 Rodolphe Quiedeville <rodolphe@quiedeville.org>
* Copyright (C) 2005 Laurent Destailleur <eldy@users.sourceforge.net>
* *
* This program is free software; you can redistribute it and/or modify * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by * it under the terms of the GNU General Public License as published by
@ -17,15 +18,23 @@
* *
* $Id$ * $Id$
* $Source$ * $Source$
*
*/ */
/**
\file htdocs/compta/prelevement/stats.php
\brief Page de stats des prélèvements
\version $Revision$
*/
require("./pre.inc.php"); require("./pre.inc.php");
/* if (!$user->rights->prelevement->bons->lire)
* Sécurité accés client accessforbidden();
*/
// Sécurité accés client
if ($user->societe_id > 0) accessforbidden(); if ($user->societe_id > 0) accessforbidden();
llxHeader('','Statistiques prélèvements'); llxHeader('','Statistiques prélèvements');
/* /*
@ -67,7 +76,7 @@ if ($db->query($sql))
$i = 0; $i = 0;
print"\n<!-- debut table -->\n"; print"\n<!-- debut table -->\n";
print '<table class="noborder" width="100%" cellspacing="0" cellpadding="4">'; print '<table class="noborder" width="100%">';
print '<tr class="liste_titre">'; print '<tr class="liste_titre">';
print '<td width="30%">Statut</td><td align="center">Nombre</td><td align="right">% en nombre</td>'; print '<td width="30%">Statut</td><td align="center">Nombre</td><td align="right">% en nombre</td>';
print '<td align="right">Montant</td><td align="right">% en montant</td></tr>'; print '<td align="right">Montant</td><td align="right">% en montant</td></tr>';
@ -113,7 +122,7 @@ if ($db->query($sql))
} }
else else
{ {
print $db->error() . ' ' . $sql; dolibarr_print_error($db);
} }
/* /*
* *
@ -158,7 +167,7 @@ if ($db->query($sql))
$i = 0; $i = 0;
print"\n<!-- debut table -->\n"; print"\n<!-- debut table -->\n";
print '<table class="noborder" width="100%" cellspacing="0" cellpadding="4">'; print '<table class="noborder" width="100%">';
print '<tr class="liste_titre">'; print '<tr class="liste_titre">';
print '<td width="30%">Statut</td><td align="center">Nombre</td>'; print '<td width="30%">Statut</td><td align="center">Nombre</td>';
print '<td align="right">% en nombre</td><td align="right">Montant</td><td align="right">% en montant</td></tr>'; print '<td align="right">% en nombre</td><td align="right">Montant</td><td align="right">% en montant</td></tr>';
@ -202,11 +211,11 @@ if ($db->query($sql))
} }
else else
{ {
print $db->error() . ' ' . $sql; dolibarr_print_error($db);
} }
$db->close(); $db->close();
llxFooter("<em>Derni&egrave;re modification $Date$ r&eacute;vision $Revision$</em>"); llxFooter('$Date$ - $Revision$');
?> ?>