Changeset 727 for trunk/phpbms/modules/base/notes_addedit.php

Timestamp:

01/07/10 11:16:05 (2 years ago)

Author:

brieb

Message:

• Added more rights look ups to certain pages
• Fixed several path disclosure errors

Files:

• trunk/phpbms/modules/base/notes_addedit.php (modified) (2 diffs)

trunk/phpbms/modules/base/notes_addedit.php

@@ -37 +37 @@
  +-------------------------------------------------------------------------+
 */
-//var_dump($_POST);
-//exit;
+
         require_once("../../include/session.php");
         require_once("include/fields.php");
@@ -58 +57 @@
         $thetable = new notes($db, "tbld:a4cdd991-cf0a-916f-1240-49428ea1bdd1", $backurl);
         $therecord = $thetable->processAddEditPage();
+
+        if($therecord["private"] && $therecord["createdby"] != $_SESSION["userinfo"]["id"] && !$_SESSION["userinfo"]["admin"])
+            goURL("../../noaccess.php");
 
         if(isset($therecord["phpbmsStatus"]))