mirror of
https://git.code.sf.net/p/seeddms/code
synced 2025-05-20 08:31:26 +00:00
check access
This commit is contained in:
parent
065fa49cc4
commit
fd770b5264
|
@ -28,6 +28,12 @@ include("../inc/inc.DBInit.php");
|
|||
include("../inc/inc.ClassUI.php");
|
||||
include("../inc/inc.Authentication.php");
|
||||
|
||||
$tmp = explode('.', basename($_SERVER['SCRIPT_FILENAME']));
|
||||
//$controller = Controller::factory($tmp[1]);
|
||||
$accessop = new SeedDMS_AccessOperation($dms, $user, $settings);
|
||||
if(!$accessop->check_controller_access($tmp[1] /*$controller*/)) {
|
||||
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("access_denied"));
|
||||
}
|
||||
if (!isset($_POST["documentid"]) || !is_numeric($_POST["documentid"]) || intval($_POST["documentid"])<1) {
|
||||
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue
Block a user