admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add security in the detail of a card : avoid modification is not allowed

Browse source
This commit is contained in:
Dany De Bontridder 2011-01-19 19:36:02 +00:00
parent 86da140ad1
commit 47ff3d5605
1 changed files with 21 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

28
html/ajax_card.php
View file

@ -119,21 +119,35 @@ case 'dc':
if ( $qcode != '')
{
$f->get_by_qcode($qcode);
$card=$f->Display(false);
$can_modify=$user->check_action(FIC);
if ( $can_modify==1)
$card=$f->Display(false);
else
$card=$f->Display(true);
if ( $card == 'FNT' )
{
$html.='<h2 class="error">'._('Fiche non trouvée').'</h2>';
}
else
{
$html.='<form method="get" onsubmit="update_card(this);return false;">';
$html.=dossier::hidden();
$html.=HtmlInput::hidden('f_id',$f->id);
$html.=HtmlInput::hidden('ctl',$ctl);
if ($can_modify==1)
{
$html.='<form method="get" onsubmit="update_card(this);return false;">';
$html.=dossier::hidden();
$html.=HtmlInput::hidden('f_id',$f->id);
$html.=HtmlInput::hidden('ctl',$ctl);
}
$html.=$card;
$html.=HtmlInput::submit('save','Sauver');
if ( $can_modify==1)
{
$html.=HtmlInput::submit('save','Sauver');
}
$html.=HtmlInput::button('close_'.$ctl,'Fermer',"onclick=\"removeDiv('$ctl')\"");
$html.='</form>';
if ($can_modify==1)
{
$html.='</form>';
}
}
}
else