Project

General

Profile

« Previous | Next » 

Revision 1402

Added by Dietmar almost 14 years ago

secure peparing and beginning fix admin/pages

View differences:

settings2.php
15 15
 * @lastmodified    $Date$
16 16
 *
17 17
 */
18
/* */
18 19

  
20
// Create new admin object and print admin header
21
require('../../config.php');
22
require_once(WB_PATH.'/framework/class.admin.php');
23
$admin = new admin('Pages', 'pages_settings');
24

  
25
if (!$admin->checkFTAN())
26
{
27
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],'index.php');
28
	exit();
29
}
30

  
19 31
// Get page id
20 32
if(!isset($_POST['page_id']) || !is_numeric($_POST['page_id']))
21 33
{
......
25 37
	$page_id = $_POST['page_id'];
26 38
}
27 39

  
28
// Create new admin object and print admin header
29
require('../../config.php');
30
require_once(WB_PATH.'/framework/class.admin.php');
31
$admin = new admin('Pages', 'pages_settings');
32

  
33
if (!$admin->checkFTAN())
40
/*
41
if( (!($page_id = $admin->checkIDKEY('page_id', 0, $_SERVER['REQUEST_METHOD']))) )
34 42
{
35
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],'index.php');
43
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS']);
36 44
	exit();
37 45
}
46
*/
38 47

  
39 48
// Include the WB functions file
40 49
require_once(WB_PATH.'/framework/functions.php');

Also available in: Unified diff