blob: 26f77afa9d05cdabc7f687f46ed5d9013e842102 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
<?php
function doError($code, $str) {
set_status_header($code);
echo $str ;
exit();
}
/**
* exits if there is no access.
*/
function checkAccess() {
global $page;
$picid = '';
$query = 'SELECT id FROM '.IMAGES_TABLE.' WHERE path=\''.$page['src_location'].'\';';
$result = pwg_query($query);
if (!is_object($result)) {
header('Location:'.$_SERVER['PHP_SELF'].'?'.$_SERVER['QUERY_STRING']);
}
if (($row = pwg_db_fetch_assoc($result))) {
if (isset($row['id'])) {
$picid = $row['id'];
} else {
doError(404, 'Requested id not found');
}
} else {
doError(404, 'Requested id not found');
}
$query = 'SELECT id FROM '.CATEGORIES_TABLE.' INNER JOIN '.IMAGE_CATEGORY_TABLE.' ON category_id = id WHERE image_id = '.$picid.' '.get_sql_condition_FandF(
array(
'forbidden_categories' => 'category_id',
'forbidden_images' => 'image_id',
),
' AND'
).'
LIMIT 1;';
if (pwg_db_num_rows(pwg_query($query)) < 1) {
doError(401, 'Access denied');
}
}
|
