Changeset 727 for trunk/phpbms/modules/base/tabledefs_custom.php

Timestamp:

01/07/10 11:16:05 (2 years ago)

Author:

brieb

Message:

• Added more rights look ups to certain pages
• Fixed several path disclosure errors

Files:

• trunk/phpbms/modules/base/tabledefs_custom.php (modified) (1 diff)

trunk/phpbms/modules/base/tabledefs_custom.php

@@ -45 +45 @@
         //Make sure table definition id is set
         if(!isset($_GET["id"]))
-            $error = new appError(300,"Passed variable not set (id)");
+            $error = new appError(200,"Passed variable not set");
+
+        if(!hasRights("Admin"))
+                goURL(APP_PATH."noaccess.php");
 
         $customFields = new customFields($db, ((int) $_GET["id"]));