Changeset 1684 for trunk/calendar/inc/class.uicustom_fields.inc.php

Timestamp:

11/20/09 08:28:07 (14 years ago)

Author:

niltonneto

Message:

Ticket #773 - Correção de problema crítico no acesso indevido aos links do Admin.

File:

• trunk/calendar/inc/class.uicustom_fields.inc.php (modified) (1 diff)

trunk/calendar/inc/class.uicustom_fields.inc.php

@@ -40 +40 @@
                 function index($error='')
                 {
+                        if (!$GLOBALS['phpgw']->acl->check('run',1,'admin'))
+                        {
+                              $GLOBALS['phpgw']->redirect($GLOBALS['phpgw']->link('/admin/index.php'));
+                        }
                         unset($GLOBALS['phpgw_info']['flags']['noheader']);
                         unset($GLOBALS['phpgw_info']['flags']['nonavbar']);