move get_pj.php to include/ajax_bank_saldo.inc.php
Add security to show_document_modele with User::check_module Rewriting of admin > utilisateur
This commit is contained in:
parent
f9ddeed4e1
commit
8110fa8042
10 changed files with 254 additions and 184 deletions
|
|
@ -32,10 +32,11 @@ $cn=new Database($gDossier);
|
|||
|
||||
|
||||
require_once ('class_user.php');
|
||||
$User=new User(new Database());
|
||||
$User=new User($cn);
|
||||
/*!\todo Add security here
|
||||
*/
|
||||
$User->Check();
|
||||
if ( $User->check_module("CFGDOCUMENT") == 0 ) exit();
|
||||
// retrieve the document
|
||||
$r=$cn->exec_sql("select md_id,md_lob,md_filename,md_mimetype
|
||||
from document_modele where md_id=$1",array($_REQUEST['md_id']));
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue