mirror of
https://github.com/phpbb/phpbb.git
synced 2025-06-05 22:14:59 +02:00
Non-authed user could potentially utilise topic_review to read denied forums .... thanks Ashe
git-svn-id: file:///svn/phpbb/trunk@2330 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
parent
61daafca3a
commit
82ace9f077
@ -66,6 +66,11 @@ function topic_review($topic_id, $is_inline_review)
|
||||
|
||||
$is_auth = array();
|
||||
$is_auth = auth(AUTH_ALL, $forum_id, $userdata, $forum_row);
|
||||
|
||||
if ( !$is_auth['auth_read'] )
|
||||
{
|
||||
message_die(GENERAL_MESSAGE, sprintf($lang['Sorry_auth_read'], $is_auth['auth_read_type']));
|
||||
}
|
||||
}
|
||||
|
||||
//
|
||||
|
Loading…
x
Reference in New Issue
Block a user