gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-02-11 09:35:00 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

exit if non authorized user tries to upload a file

Browse Source
This commit is contained in:
Uwe Steinmann 2014-02-28 08:53:31 +01:00
parent 39cf9c5545
commit 266e169c98
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
op/op.AddFile2.php
View File

@ -42,20 +42,20 @@ if( move_uploaded_file( $source_file_path, $target_file_path ) ) {
fclose($fpnew);
if (!isset($_POST["documentid"]) || !is_numeric($_POST["documentid"]) || intval($_POST["documentid"])<1) {
echo getMLText("invalid_doc_id");
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_POST["documentid"];
$document = $dms->getDocument($documentid);
if (!is_object($document)) {
echo getMLText("invalid_doc_id");
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$folder = $document->getFolder();
if ($document->getAccessMode($user) < M_READWRITE) {
echo getMLText("access_denied");
UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("access_denied"));
}
$userfiletmp = $settings->_stagingDir.$fileId;