From 8991ae86356c1fb4e5972ea7ca348832054ce1a1 Mon Sep 17 00:00:00 2001
From: sparkyx <dany118@gmail.com>
Date: Sun, 13 Mar 2005 16:27:57 +0000
Subject: [PATCH] Task 3778 Fix security in show_document

---
 html/show_document.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/html/show_document.php b/html/show_document.php
index 5deaf90c8..1d0f7f680 100644
--- a/html/show_document.php
+++ b/html/show_document.php
@@ -34,7 +34,7 @@ $cn=DbConnect($_SESSION['g_dossier']);
 
 
 include ('class_user.php');
-$User=new cl_user($cn);
+$User=new cl_user(DbConnect());
 $User->Check();
 // retrieve the jrn
 $r=ExecSql($cn,"select jr_def_id from jrn where jr_grpt_id=$jr_grpt_id");
@@ -45,7 +45,7 @@ if ( pg_num_rows($r) == 0 ) {
 $a=pg_fetch_array($r,0);
 $jrn=$a['jr_def_id'];
 
-if ($User->AccessJrn($jrn) == false ){
+if ($User->AccessJrn($cn,$jrn) == false ){
   /* Cannot Access */
   NoAccess();
   exit -1;