1
0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-05 22:14:59 +02:00

Non-authed user could potentially utilise topic_review to read denied forums .... thanks Ashe

git-svn-id: file:///svn/phpbb/trunk@2330 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Paul S. Owen 2002-03-18 23:56:36 +00:00
parent 61daafca3a
commit 82ace9f077

View File

@ -66,6 +66,11 @@ function topic_review($topic_id, $is_inline_review)
$is_auth = array();
$is_auth = auth(AUTH_ALL, $forum_id, $userdata, $forum_row);
if ( !$is_auth['auth_read'] )
{
message_die(GENERAL_MESSAGE, sprintf($lang['Sorry_auth_read'], $is_auth['auth_read_type']));
}
}
//