[Noalyss-commit] [noalyss] 02/11: Harden security

[Dany De Bontridder]

sparkyx pushed a commit to branch master
in repository noalyss.

commit c8303e5f522eb5fb0dc060945404a26a14025113
Author: sparkyx <danydb@noalyss.eu>
AuthorDate: Mon Mar 29 13:31:49 2021 +0200

    Harden security
---
 include/ajax/ajax_forecast.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/include/ajax/ajax_forecast.php b/include/ajax/ajax_forecast.php
index fc6f204..e048f3e 100644
--- a/include/ajax/ajax_forecast.php
+++ b/include/ajax/ajax_forecast.php
@@ -19,8 +19,12 @@
 
 // Copyright Author Dany De Bontridder danydb@noalyss.eu
 
+if (!defined('ALLOWED')) die('Appel direct ne sont pas permis');
+
 require_once NOALYSS_INCLUDE . "/database/forecast_sql.class.php";
 
+if ($g_user->check_module("FORECAST")==0) die();
+
 $http = new HttpInput();
 $input = $http->request("input");
 $action = $http->request("ieaction", "string", "display");