tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

2012-12-04 Sergio Martin <sergio.martin@artica.es> 

* extensions/dbmanager.php
	godmode/servers/recon_script.php: Comment missed check_referer 
	calls to disable it by the moment



git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@7226 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
This commit is contained in:
zarzuelo 2012-12-04 16:34:36 +00:00
parent 10342303a1
commit b843bb4131
3 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pandora_console/ChangeLog
View File

@ -1,3 +1,9 @@
2012-12-04 Sergio Martin <sergio.martin@artica.es>
* extensions/dbmanager.php
godmode/servers/recon_script.php: Comment missed check_referer
calls to disable it by the moment
2012-12-04 Sergio Martin <sergio.martin@artica.es>
* pandoradb.sql

5
pandora_console/extensions/dbmanager.php
View File

@ -89,11 +89,14 @@ function dbmgr_extension_main () {
return;
}
/*
* Disabled at the moment.
if (!check_referer()) {
require ("general/noaccess.php");
return;
}
*/
$sql = (string) get_parameter ('sql');
@ -159,4 +162,4 @@ extensions_add_godmode_menu_option (__('DB interface'), 'PM','gdbman',"dbmanager
/* This sets the function to be called when the extension is selected in the operation menu */
extensions_add_godmode_function ('dbmgr_extension_main');
?>
?>

5
pandora_console/godmode/servers/recon_script.php
View File

@ -37,11 +37,14 @@ if (! check_acl ($config['id_user'], 0, "LM")) {
return;
}
/*
* Disabled at the moment.
if (!check_referer()) {
require ("general/noaccess.php");
return;
}
*/
$view = get_parameter ("view", "");
$create = get_parameter ("create", "");
@ -217,4 +220,4 @@ else {
echo "<input name='crtbutton' type='submit' class='sub next' value='".__('Add')."'>";
echo "</td></tr></table>";
}
?>
?>