diff --git a/include/admin_repo.inc.php b/include/admin_repo.inc.php index 55ea8ba45..7d68f44f0 100644 --- a/include/admin_repo.inc.php +++ b/include/admin_repo.inc.php @@ -36,21 +36,30 @@ $rep=new Database(); $User=new Noalyss_user($rep); $User->Check(); +$audit=true; if ($User->admin != 1) { $theme=(isset($User->theme))?$User->theme:""; + $User->audit('FAIL',"ADMIN : [$action]".var_export($_REQUEST,true)); html_page_start($theme); - echo "

"; + echo '
'; + echo "

"; + echo _("Accès interdit"); + echo "

"; + echo ''; echo _("Vous n'êtes pas administateur"); - echo "

"; + echo ''; $reconnect=http_build_query(array("reconnect"=>1,"backurl"=>"admin-noalyss.php?action=upgrade")); - echo ''; - echo _("Connectez-vous comme administrateur"); + echo ''; + + echo _("Cliquez ici pour vous connecter comme administrateur"); echo ''; html_page_stop(); return; } +$User->audit('SUCCESS',"ADMIN : [$action] ".var_export($_REQUEST,true)); + // For a backup , we must avoid to send anything before the // dump file if ( $action== 'backup') { diff --git a/include/ajax/ajax_admin.php b/include/ajax/ajax_admin.php index d4bf4396d..20a19494d 100644 --- a/include/ajax/ajax_admin.php +++ b/include/ajax/ajax_admin.php @@ -27,15 +27,18 @@ if (!defined('ALLOWED')) * admin-noalyss.php * @see admin-noalyss.php ajax_misc.php admin.js */ -global $g_user; +global $g_user,$audit; +$audit=true; if ($g_user->isAdmin()==0) { + $g_user->audit('FAIL',"ADMIN : ".var_export($_REQUEST,true)); die(); } session_write_close(); set_language(); $http=new HttpInput(); $op=$http->request("op"); +$g_user->audit('SUCCESS',"ADMIN : $op"); // From admin, grant the access to a folder to an // user if ($op=='folder_add') // operation