tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-28 08:14:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fixed several problems of security. Tiquet: #3550

Browse Source
This commit is contained in:
m-lopez-f 2016-04-13 13:51:01 +02:00
parent c8e49ef7b3
commit 36ec5ca8f1
4 changed files with 31 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pandora_console/godmode/update_manager/update_manager.offline.php
View File

@ -18,6 +18,14 @@ global $config;
// ui_require_css_file('update_manager', 'godmode/update_manager/'); // ui_require_css_file('update_manager', 'godmode/update_manager/');
check_login ();
// ui_require_css_file('update_manager', 'godmode/update_manager/');
if (! check_acl ($config['id_user'], 0, "PM") && ! is_user_admin ($config['id_user'])) {
db_pandora_audit("ACL Violation", "Trying to access Setup Management");
require ("general/noaccess.php");
return;
}
$baseurl = ui_get_full_url(false, false, false, false); $baseurl = ui_get_full_url(false, false, false, false);
?> ?>

8
pandora_console/godmode/update_manager/update_manager.online.php
View File

@ -16,6 +16,14 @@
global $config; global $config;
check_login ();
if (! check_acl ($config['id_user'], 0, "PM") && ! is_user_admin ($config['id_user'])) {
db_pandora_audit("ACL Violation", "Trying to access Setup Management");
require ("general/noaccess.php");
return;
}
ui_require_css_file('update_manager', 'godmode/update_manager/'); ui_require_css_file('update_manager', 'godmode/update_manager/');
require_once("include/functions_update_manager.php"); require_once("include/functions_update_manager.php");
enterprise_include_once("include/functions_update_manager.php"); enterprise_include_once("include/functions_update_manager.php");

7
pandora_console/godmode/update_manager/update_manager.php
View File

@ -16,9 +16,16 @@
global $config; global $config;
check_login ();
//The ajax is in //The ajax is in
// include/ajax/update_manager.ajax.php // include/ajax/update_manager.ajax.php
if (! check_acl ($config['id_user'], 0, "PM") && ! is_user_admin ($config['id_user'])) {
db_pandora_audit("ACL Violation", "Trying to access Setup Management");
require ("general/noaccess.php");
return;
}
$tab = get_parameter('tab', 'online'); $tab = get_parameter('tab', 'online');
$buttons = array( $buttons = array(

8
pandora_console/godmode/update_manager/update_manager.setup.php
View File

@ -16,6 +16,14 @@
global $config; global $config;
check_login ();
if (! check_acl ($config['id_user'], 0, "PM") && ! is_user_admin ($config['id_user'])) {
db_pandora_audit("ACL Violation", "Trying to access Setup Management");
require ("general/noaccess.php");
return;
}
$action_update_url_update_manager = (bool)get_parameter( $action_update_url_update_manager = (bool)get_parameter(
'action_update_url_update_manager', 0); 'action_update_url_update_manager', 0);