Project

General

Profile

« Previous | Next » 

Revision 1402

Added by Luisehahne almost 14 years ago

secure peparing and beginning fix admin/pages

View differences:

settings.php
16 16
 *
17 17
 */
18 18

  
19
/*
20
*/
21
// Create new admin object
22
require('../../config.php');
23
require_once(WB_PATH.'/framework/class.admin.php');
24
$admin = new admin('Pages', 'pages_settings');
25
// Include the WB functions file
26
require_once(WB_PATH.'/framework/functions-utf8.php');
27

  
19 28
// Get page id
20 29
if(!isset($_GET['page_id']) || !is_numeric($_GET['page_id']))
21 30
{
......
25 34
	$page_id = $_GET['page_id'];
26 35
}
27 36

  
28
// Create new admin object
29
require('../../config.php');
30
require_once(WB_PATH.'/framework/class.admin.php');
31
$admin = new admin('Pages', 'pages_settings');
37
/*
38
if( (!($page_id = $admin->checkIDKEY('page_id', 0, $_SERVER['REQUEST_METHOD']))) )
39
{
40
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS']);
41
	exit();
42
}
43
*/
32 44

  
33
// Include the WB functions file
34
require_once(WB_PATH.'/framework/functions-utf8.php');
35

  
36
// Get perms
37
/*$database = new database(); */
38

  
39 45
$sql = 'SELECT * FROM `'.TABLE_PREFIX.'pages` WHERE `page_id` = '.$page_id;
40 46
$results = $database->query($sql);
41 47
$results_array = $results->fetchRow();
......
94 100

  
95 101
$template->set_var(array(
96 102
				'PAGE_ID' => $results_array['page_id'],
103
				// 'PAGE_IDKEY' => $admin->getIDKEY($results_array['page_id']),
104
				'PAGE_IDKEY' => $results_array['page_id'],
97 105
				'PAGE_TITLE' => ($results_array['page_title']),
98 106
				'MENU_TITLE' => ($results_array['menu_title']),
99 107
				'DESCRIPTION' => ($results_array['description']),

Also available in: Unified diff