[Noalyss-commit] [noalyss] 10/20: security

[Dany De Bontridder]

sparkyx pushed a commit to branch master
in repository noalyss.

commit 1d867778dd9b829f44657d9112d237a873b78971
Author: Dany De Bontridder <address@hidden>
Date:   Sat Oct 24 14:32:03 2015 +0200

    security
---
 html/ajax_misc.php |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)

diff --git a/html/ajax_misc.php b/html/ajax_misc.php
index d74da57..f5b2777 100644
--- a/html/ajax_misc.php
+++ b/html/ajax_misc.php
@@ -71,7 +71,9 @@ if ($gDossier<>0) {
     $g_parameter=new Own($cn);
     $g_user = new User($cn);
     $g_user->check(true);
-    $g_user->check_dossier($gDossier, true);
+    if ( $g_user->check_dossier($gDossier, true) == 'X' ) {
+        die(_('Non autorisé'))
+    }
 }
 else
 {