From c74e42d841286cfd33ca287ad113cbdd2017e86d Mon Sep 17 00:00:00 2001 From: Joey Schulze Date: Tue, 9 Mar 2010 09:05:36 +0100 Subject: [PATCH] Adjust permission check --- lib/general.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/general.php b/lib/general.php index 8c95557..837a4b8 100644 --- a/lib/general.php +++ b/lib/general.php @@ -76,8 +76,8 @@ function check_session() /* table connections */ if (substr($_SERVER["SCRIPT_FILENAME"],-25) == '/ricoUpdateConnection.php' && - !empty($_POST['table'])) { - if (check_permissions($_POST['table'])) + !empty($_GET['id']) && substr($_GET['id'],0,5) == 'grid_') { + if (check_permissions(substr($_GET['id'],5))) return true; else format_ajax(array('error' => 'No permission to access data')); -- 2.20.1