mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-08-08 01:32:59 +02:00
Resolved Issue ID 0000356:
o Increase security on adviser mode First modifications of n modifications. All the others modifications will be done on BSF branch. Merge branch-1_6 1558:1559 into BSF git-svn-id: http://piwigo.org/svn/branches/branch-1_6@1569 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
@@ -53,7 +53,7 @@ while ($row = mysql_fetch_array($result))
|
||||
$conf[$row['param']] = $row['value'];
|
||||
// if the parameter is present in $_POST array (if a form is submited), we
|
||||
// override it with the submited value
|
||||
if (isset($_POST[$row['param']]))
|
||||
if (isset($_POST[$row['param']]) and !is_adviser())
|
||||
{
|
||||
$conf[$row['param']] = $_POST[$row['param']];
|
||||
if ( 'page_banner'==$row['param'] )
|
||||
@@ -63,7 +63,7 @@ while ($row = mysql_fetch_array($result))
|
||||
}
|
||||
}
|
||||
//------------------------------ verification and registration of modifications
|
||||
if (isset($_POST['submit']))
|
||||
if (isset($_POST['submit']) and !is_adviser())
|
||||
{
|
||||
$int_pattern = '/^\d+$/';
|
||||
switch ($page['section'])
|
||||
|
||||
Reference in New Issue
Block a user