Changeset 727 for trunk/phpbms/modules/base/tabledefs_searchfields.php

Timestamp:

01/07/10 11:16:05 (2 years ago)

Author:

brieb

Message:

• Added more rights look ups to certain pages
• Fixed several path disclosure errors

Files:

• trunk/phpbms/modules/base/tabledefs_searchfields.php (modified) (1 diff)

trunk/phpbms/modules/base/tabledefs_searchfields.php

@@ -42 +42 @@
         include("include/tabledefs_searchfields_include.php");
 
+        if(!hasRights("Admin"))
+                goURL(APP_PATH."noaccess.php");
+
+        if(!isset($_GET["id"]))
+                $error = new appError(-200, "Passed parameter missing", "Invalid request", true);
 
         $searchfields = new tableSearchFields($db, $_GET["id"]);