From 378bcf09c3150e7353765b11da98284af81351bd Mon Sep 17 00:00:00 2001 From: Arturo Gonzalez Diaz Date: Tue, 8 Sep 2015 11:52:06 +0200 Subject: [PATCH] Fixed sound_events access in Pandora 6. Ticket #2691 --- pandora_console/operation/events/sound_events.php | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/pandora_console/operation/events/sound_events.php b/pandora_console/operation/events/sound_events.php index 80e26f2919..10e4216a66 100644 --- a/pandora_console/operation/events/sound_events.php +++ b/pandora_console/operation/events/sound_events.php @@ -13,8 +13,10 @@ // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. -// Load global vars +// Real start +session_start (); +// Load global vars if ((! file_exists("../../include/config.php")) || (! is_readable("../../include/config.php"))) { exit; } @@ -26,14 +28,10 @@ require_once ('../../include/auth/mysql.php'); global $config; -// Real start -session_start (); - // Check user check_login (); $config["id_user"] = $_SESSION["id_usuario"]; - if (! check_acl ($config['id_user'], 0, "ER")) { db_pandora_audit("ACL Violation","Trying to access event viewer"); require ("general/noaccess.php");