admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Task 3778 Fix security in show_document

Browse source
This commit is contained in:
sparkyx 2005-03-13 16:27:57 +00:00
parent a56855a900
commit 8991ae8635
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
html/show_document.php
View file

@ -34,7 +34,7 @@ $cn=DbConnect($_SESSION['g_dossier']);
include ('class_user.php');
$User=new cl_user($cn);
$User=new cl_user(DbConnect());
$User->Check();
// retrieve the jrn
$r=ExecSql($cn,"select jr_def_id from jrn where jr_grpt_id=$jr_grpt_id");
@ -45,7 +45,7 @@ if ( pg_num_rows($r) == 0 ) {
$a=pg_fetch_array($r,0);
$jrn=$a['jr_def_id'];
if ($User->AccessJrn($jrn) == false ){
if ($User->AccessJrn($cn,$jrn) == false ){
/* Cannot Access */
NoAccess();
exit -1;