mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-07-17 23:21:33 +02:00
Code Issues Releases Wiki Activity

[ticket/15060] Set correct forum id in user session data if f= is missing

Browse Source 
PHPBB3-15060
This commit is contained in:
kasimi
2017-10-23 22:36:29 +02:00
parent 2c01fe67e9
commit 60596eb675
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
phpBB/viewtopic.php
View File

@@ -263,6 +263,10 @@ if (!$topic_data)
$forum_id = (int) $topic_data['forum_id'];
// If the request is missing the f parameter, the forum id in the user session data is 0 at the moment.
// Let's fix that now so that the user can't hide from the forum's Who Is Online list.
$user->page['forum'] = $forum_id;
// Now we know the forum_id and can check the permissions
if ($topic_data['topic_visibility'] != ITEM_APPROVED && !$auth->acl_get('m_approve', $forum_id))
{