move get_pj.php to include/ajax_bank_saldo.inc.php

Add security to show_document_modele with User::check_module
Rewriting of admin > utilisateur
This commit is contained in:
Dany De Bontridder 2011-11-11 15:42:09 +00:00
parent f9ddeed4e1
commit 8110fa8042
10 changed files with 254 additions and 184 deletions

View file

@ -32,10 +32,11 @@ $cn=new Database($gDossier);
require_once ('class_user.php');
$User=new User(new Database());
$User=new User($cn);
/*!\todo Add security here
*/
$User->Check();
if ( $User->check_module("CFGDOCUMENT") == 0 ) exit();
// retrieve the document
$r=$cn->exec_sql("select md_id,md_lob,md_filename,md_mimetype
from document_modele where md_id=$1",array($_REQUEST['md_id']));