4images Forum & Community
4images Help / Hilfe => Bug Fixes & Patches => Topic started by: V@no on March 14, 2005, 05:10:37 AM
-
Because of this bug people are able see images through postcard creation page, which they dont have permissions to view.
Open postcards.php
Find:
if (!check_permission("auth_sendpostcard", $cat_id)) {
Replace with:
/*
FIX ACCESS RESTRICTED IMAGES
ORIGINAL BLOCK:
if (!check_permission("auth_sendpostcard", $cat_id)) {
*/
/*
FIX ACCESS RESTRICTED IMAGES
START REPLACE
*/
if (!check_permission("auth_viewcat", $cat_id) || !check_permission("auth_viewimage", $cat_id) || !check_permission("auth_sendpostcard", $cat_id)) {
/*
FIX ACCESS RESTRICTED IMAGES
END REPLACE
*/