admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security C0CARD

Browse source
This commit is contained in:
sparkyx 2025-07-19 12:09:08 +02:00
parent b457768d44
commit 35c4837f63
1 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
include/ajax/ajax_card_attribute.php
View file

@ -23,9 +23,16 @@
* @file
* @brief answer to card_attr_inc.php
*/
/*
* @var $g_user Noalyss_User
*/
global $g_user;
// security
$g_user->can_request("CCARDAT");
if ( $g_user->check_module("C0CARD") == 0 ) {
record_log(new \Exception("C0CARD1: not authorized"));
return;
}
$http=new HttpInput();