lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

amlioration de la scurit

Browse Source
This commit is contained in:
Regis Houssin 2006-03-10 10:07:46 +00:00
parent ebb5696fde
commit f501321470
1 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
htdocs/fourn/fiche.php
View File

@ -36,7 +36,10 @@ $langs->load('bills');
$langs->load('orders');
$langs->load('companies');
$socid = $_GET['socid'];
$socidp = isset($_GET["socid"])?$_GET["socid"]:'';
if ($socid == '') accessforbidden();
/*
* Sécurité accés client
*/
@ -46,6 +49,19 @@ if ($user->societe_id > 0)
$socid = $user->societe_id;
}
// Protection restriction commercial
if (!$user->rights->commercial->client->voir && $socid && !$user->societe_id > 0)
{
$sql = "SELECT sc.fk_soc, s.fournisseur";
$sql .= " FROM ".MAIN_DB_PREFIX."societe_commerciaux as sc, ".MAIN_DB_PREFIX."societe as s";
$sql .= " WHERE fk_soc = ".$socid." AND fk_user = ".$user->id." AND s.fournisseur = 1";
if ( $db->query($sql) )
{
if ( $db->num_rows() == 0) accessforbidden();
}
}
/*
* Mode fiche