Loading...
 
Skip to main content

tiki-view_forum_thread.php does not check for category perms

Status
Closed
Subject
tiki-view_forum_thread.php does not check for category perms
Version
1.9.x
Category
  • Error
Feature
Category
Forum
Resolution status
Fixed or Solved
Submitted by
Nelson Ko
Volunteered to solve
Nelson Ko
Lastmod by
...:::JuStYnKa:::...
Rating
(0)
Description

tiki-view_forum_thread.php does not check for category perms

CVS HEAD 1.9.x Revision 1.82

Solution

to copy the following blocks from tiki-view_forum.php into the correct spots should work.

if ($feature_categories == 'y') {
global $categlib;
if (!is_object($categlib)) {
include_once('lib/categories/categlib.php');
}
}

and

} elseif ($tiki_p_admin != 'y' && $feature_categories == 'y') {
$perms_array = $categlib->get_object_categories_perms($user, 'forum', $_REQUEST'forumId');
if ($perms_array) {
$is_categorized = TRUE;
foreach ($perms_array as $perm => $value) {
$$perm = $value;
}
} else {
$is_categorized = FALSE;
}
if ($is_categorized && isset($tiki_p_view_categories) && $tiki_p_view_categories != 'y') {
if (!isset($user)){
$smarty->assign('msg',$smarty->fetch('modules/mod-login_box.tpl'));
$smarty->assign('errortitle',tra("Please login"));
} else {
$smarty->assign('msg',tra("Permission denied you cannot view this page"));
}
$smarty->display("error.tpl");
die;
}
}

Importance
7
Priority
35
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
910
Created
Wednesday 18 October, 2006 03:13:39 UTC
by Unknown
LastModif
Wednesday 01 August, 2007 20:00:59 UTC


Show PHP error messages