Changeset 7474

Timestamp:

May 29, 2008, 3:09:59 PM (12 years ago)

Author:

ebihara

Message:

#2551:アルバム画像追加時の権限チェックが漏れていたのを修正

Location:

OpenPNE/trunk/webapp/modules/pc

Files:

• do/h_album_image_add_insert_c_album_image.php (modified) (1 diff)
• page/h_album_image_add_confirm.php (modified) (1 diff)

OpenPNE/trunk/webapp/modules/pc/do/h_album_image_add_insert_c_album_image.php

@@ -28 +28 @@
         $target_c_album_id = $requests['target_c_album_id'];
         // ----------
+
+        $c_album = db_album_get_c_album4c_album_id($target_c_album_id);
+        if ($c_album['c_member_id'] != $u) {
+            handle_kengen_error();
+        }
 
         $img_tmp_dir_path = OPENPNE_VAR_DIR . '/tmp/';

OpenPNE/trunk/webapp/modules/pc/page/h_album_image_add_confirm.php

@@ -31 +31 @@
         $image_description5 = $requests['image_description5'];
         // ----------
+
+        $c_album = db_album_get_c_album4c_album_id($target_c_album_id);
+        if ($c_album['c_member_id'] != $u) {
+            handle_kengen_error();
+        }
 
         $sessid = session_id();