archive/piwigo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Resolved Issue ID 0000575:

Browse source 
o Missing Help on screen Groups List/Group Management

Resolved Issue ID 0000356:
  o Increase security on adviser mode (Screen Group List)


git-svn-id: http://piwigo.org/svn/trunk@1591 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
rub 2006-11-02 23:11:43 +00:00
commit ac7f71bf1e
4 changed files with 54 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

9
admin/group_list.php
View file

@ -41,7 +41,7 @@ check_status(ACCESS_ADMINISTRATOR);
// | delete a group |
// +-----------------------------------------------------------------------+
if (isset($_GET['delete']) and is_numeric($_GET['delete']))
if (isset($_GET['delete']) and is_numeric($_GET['delete']) and !is_adviser())
{
// destruction of the access linked to the group
$query = '
@ -84,7 +84,7 @@ DELETE
// | add a group |
// +-----------------------------------------------------------------------+
if (isset($_POST['submit_add']))
if (isset($_POST['submit_add']) and !is_adviser())
{
if (empty($_POST['groupname']))
{
@ -126,7 +126,7 @@ INSERT INTO '.GROUPS_TABLE.'
// | toggle is default group property |
// +-----------------------------------------------------------------------+
if (isset($_GET['toggle_is_default']) and is_numeric($_GET['toggle_is_default']))
if (isset($_GET['toggle_is_default']) and is_numeric($_GET['toggle_is_default']) and !is_adviser())
{
$query = '
SELECT name, is_default
@ -157,7 +157,8 @@ $template->set_filenames(array('group_list' => 'admin/group_list.tpl'));
$template->assign_vars(
array(
'F_ADD_ACTION' => PHPWG_ROOT_PATH.'admin.php?page=group_list'
'F_ADD_ACTION' => PHPWG_ROOT_PATH.'admin.php?page=group_list',
'U_HELP' => PHPWG_ROOT_PATH.'popuphelp.php?page=group_list',
)
);