Project

General

Profile

« Previous | Next » 

Revision 1404

Added by Luisehahne almost 15 years ago

Security fix in pages

View differences:

delete.php
25 25 
// Include the WB functions file
26 26 
require_once(WB_PATH.'/framework/functions.php');
27 27 

  		




  28
  
  
    
/*


  		




  
  28
  
    

  		




  29
  29
  
    
if( (!($page_id = $admin->checkIDKEY('page_id', 0, $_SERVER['REQUEST_METHOD']))) )


  		




  30
  30
  
    
{


  		




  31
  31
  
    
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS']);


  		




  32
  32
  
    
	exit();


  		




  33
  33
  
    
}


  		




  34
  
  
    
*/


  		




  35
  34
  
    

  		




  
  35
  
    
/* 


  		




  36
  36
  
    
// Get page id


  		




  37
  37
  
    
if(!isset($_GET['page_id']) || !is_numeric($_GET['page_id'])) {


  		




  38
  38
  
    
	header("Location: index.php");


  		




  ......




  40
  40
  
    
} else {


  		




  41
  41
  
    
	$page_id = $_GET['page_id'];


  		




  42
  42
  
    
}


  		




  43
  
  
    

  		




  
  43
  
    
*/


  		




  44
  44
  
    
// Get perms


  		




  45
  45
  
    
if (!$admin->get_page_permission($page_id,'admin')) {


  		




  46
  46
  
    
	$admin->print_error($MESSAGE['PAGES']['INSUFFICIENT_PERMISSIONS']);


  		












Also available in:  Unified diff