Changeset 727 for trunk/phpbms/modules/base/tabledefs_groupings.php

Timestamp:

01/07/10 11:16:05 (2 years ago)

Author:

brieb

Message:

• Added more rights look ups to certain pages
• Fixed several path disclosure errors

Files:

• trunk/phpbms/modules/base/tabledefs_groupings.php (modified) (1 diff)

trunk/phpbms/modules/base/tabledefs_groupings.php

@@ -43 +43 @@
         include("include/tablegroupings.php");
 
+        if(!hasRights("Admin"))
+                goURL(APP_PATH."noaccess.php");
+
+        if(!isset($_GET["id"]))
+                $error = new appError(-200, "Passed parameter missing", "Invalid request", true);
 
         //grab the table name