Project

General

Profile

« Previous | Next » 

Revision 1402

Added by Dietmar almost 14 years ago

secure peparing and beginning fix admin/pages

View differences:

modify.php
15 15
 * @lastmodified    $Date$
16 16
 *
17 17
*/
18
/*
19
*/
20
// Create new admin object
21
require('../../config.php');
22
require_once(WB_PATH.'/framework/class.admin.php');
18 23

  
24
$admin = new admin('Pages', 'pages_modify');
25

  
19 26
// Get page id
20 27
if(!isset($_GET['page_id']) || !is_numeric($_GET['page_id'])) {
21 28
	header("Location: index.php");
......
24 31
	$page_id = $_GET['page_id'];
25 32
}
26 33

  
27
// Create new admin object
28
require('../../config.php');
29
require_once(WB_PATH.'/framework/class.admin.php');
34
/*
35
if( (!($page_id = $admin->checkIDKEY('page_id', 0, $_SERVER['REQUEST_METHOD']))) )
36
{
37
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS']);
38
	exit();
39
}
40
*/
30 41

  
31
$admin = new admin('Pages', 'pages_modify');
32

  
33 42
// Get perms
34 43
if(!$admin->get_page_permission($page_id,'admin')) {
35 44
	$admin->print_error($MESSAGE['PAGES']['INSUFFICIENT_PERMISSIONS']);
......
57 66

  
58 67
$template->set_var(array(
59 68
			'PAGE_ID' => $results_array['page_id'],
69
			// 'PAGE_IDKEY' => $admin->getIDKEY($results_array['page_id']),
70
			'PAGE_IDKEY' => $results_array['page_id'],
60 71
			'PAGE_TITLE' => ($results_array['page_title']),
61 72
			'MENU_TITLE' => ($results_array['menu_title']),
62
            'FTAN' => 'FTAN',
63 73
			'ADMIN_URL' => ADMIN_URL,
64 74
			'WB_URL' => WB_URL,
65 75
			'WB_PATH' => WB_PATH,

Also available in: Unified diff