tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-26 23:35:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

2012-12-04 Sergio Martin <sergio.martin@artica.es>

Browse Source 
* extensions/dbmanager.php
	godmode/servers/recon_script.php: Comment missed check_referer 
	calls to disable it by the moment



git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@7226 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
This commit is contained in:
zarzuelo 2012-12-04 16:34:36 +00:00
parent 10342303a1
commit b843bb4131
3 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pandora_console/ChangeLog
View File

@ -1,3 +1,9 @@
2012-12-04 Sergio Martin <sergio.martin@artica.es>
* extensions/dbmanager.php
godmode/servers/recon_script.php: Comment missed check_referer
calls to disable it by the moment
2012-12-04 Sergio Martin <sergio.martin@artica.es> 2012-12-04 Sergio Martin <sergio.martin@artica.es>
* pandoradb.sql * pandoradb.sql

5
pandora_console/extensions/dbmanager.php
View File

@ -89,11 +89,14 @@ function dbmgr_extension_main () {
return; return;
} }
/*
* Disabled at the moment.
if (!check_referer()) { if (!check_referer()) {
require ("general/noaccess.php"); require ("general/noaccess.php");
return; return;
} }
*/
$sql = (string) get_parameter ('sql'); $sql = (string) get_parameter ('sql');
@ -159,4 +162,4 @@ extensions_add_godmode_menu_option (__('DB interface'), 'PM','gdbman',"dbmanager
/* This sets the function to be called when the extension is selected in the operation menu */ /* This sets the function to be called when the extension is selected in the operation menu */
extensions_add_godmode_function ('dbmgr_extension_main'); extensions_add_godmode_function ('dbmgr_extension_main');
?> ?>

5
pandora_console/godmode/servers/recon_script.php
View File

@ -37,11 +37,14 @@ if (! check_acl ($config['id_user'], 0, "LM")) {
return; return;
} }
/*
* Disabled at the moment.
if (!check_referer()) { if (!check_referer()) {
require ("general/noaccess.php"); require ("general/noaccess.php");
return; return;
} }
*/
$view = get_parameter ("view", ""); $view = get_parameter ("view", "");
$create = get_parameter ("create", ""); $create = get_parameter ("create", "");
@ -217,4 +220,4 @@ else {
echo "<input name='crtbutton' type='submit' class='sub next' value='".__('Add')."'>"; echo "<input name='crtbutton' type='submit' class='sub next' value='".__('Add')."'>";
echo "</td></tr></table>"; echo "</td></tr></table>";
} }
?> ?>