Project

General

Profile

« Previous | Next » 

Revision 1357

Added by FrankH almost 14 years ago

Security fixes

View differences:

save.php
35 35 
require_once(WB_PATH.'/framework/class.admin.php');
36 36 
$admin = new admin('Pages', 'pages_modify');
37 37 

  		




  
  38
  
    
if (!$admin->checkFTAN())


  		




  
  39
  
    
{


  		




  
  40
  
    
	$admin->print_error($MESSAGE['PAGES']['NOT_FOUND']);


  		




  
  41
  
    
	exit();


  		




  
  42
  
    
}


  		




  
  43
  
    

  		




  38
  44
  
    
// Get perms


  		




  39
  45
  
    
$sql  = 'SELECT `admin_groups`,`admin_users` FROM `'.TABLE_PREFIX.'pages` ';


  		




  40
  46
  
    
$sql .= 'WHERE `page_id` = '.$page_id;


  		




  ......




  89
  95
  
    
{


  		




  90
  96
  
    
	$admin->print_error($database->get_error(), $js_back);


  		




  91
  97
  
    
} else {


  		




  92
  
  
    
	$admin->print_success($MESSAGE['PAGES']['SAVED'], ADMIN_URL.'/pages/modify.php?page_id='.$page_id);


  		




  
  98
  
    
	$ftan2 = $admin->getFTAN(2);


  		




  
  99
  
    
	$admin->print_success($MESSAGE['PAGES']['SAVED'], ADMIN_URL."/pages/modify.php?page_id=$page_id&$ftan2");


  		




  93
  100
  
    
}


  		




  94
  101
  
    

  		




  95
  102
  
    
// Print admin footer


  		












Also available in:  Unified diff