admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

SECURITY : admin action are always loggued

Browse source
This commit is contained in:
sparkyx 2025-01-19 12:13:41 +01:00
parent fcb62c09de
commit ba773b09d0
2 changed files with 17 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

5
include/ajax/ajax_admin.php
View file

@ -27,15 +27,18 @@ if (!defined('ALLOWED'))
* admin-noalyss.php
* @see admin-noalyss.php ajax_misc.php admin.js
*/
global $g_user;
global $g_user,$audit;
$audit=true;
if ($g_user->isAdmin()==0)
{
$g_user->audit('FAIL',"ADMIN : ".var_export($_REQUEST,true));
die();
}
session_write_close();
set_language();
$http=new HttpInput();
$op=$http->request("op");
$g_user->audit('SUCCESS',"ADMIN : $op");
// From admin, grant the access to a folder to an
// user
if ($op=='folder_add') // operation