Changeset 13156

Timestamp:

Nov 18, 2009, 7:01:29 PM (13 years ago)

Author:

kiwa

Message:

#4338: 権限チェックの漏れを修正

Location:

OpenPNE/branches/stable-2.14.x/webapp/modules/pc/do

Files:

• c_event_edit_delete_c_commu_topic_comment_image.php (modified) (1 diff)
• c_topic_edit_delete_c_commu_topic_comment_file.php (modified) (1 diff)
• c_topic_edit_delete_c_commu_topic_comment_image.php (modified) (1 diff)

OpenPNE/branches/stable-2.14.x/webapp/modules/pc/do/c_event_edit_delete_c_commu_topic_comment_image.php

@@ -30 +30 @@
             handle_kengen_error();
         }
+        if ($c_commu['is_topic'] == 'member' &&
+            !db_commu_is_c_commu_member($c_topic['c_commu_id'], $u)) {
+            handle_kengen_error();
+        }
         //---
 

OpenPNE/branches/stable-2.14.x/webapp/modules/pc/do/c_topic_edit_delete_c_commu_topic_comment_file.php

@@ -29 +29 @@
             handle_kengen_error();
         }
+        if ($c_commu['is_topic'] == 'member' &&
+            !db_commu_is_c_commu_member($c_topic['c_commu_id'], $u)) {
+            handle_kengen_error();
+        }
         //---
 

OpenPNE/branches/stable-2.14.x/webapp/modules/pc/do/c_topic_edit_delete_c_commu_topic_comment_image.php

@@ -30 +30 @@
             handle_kengen_error();
         }
+        if ($c_commu['is_topic'] == 'member' &&
+            !db_commu_is_c_commu_member($c_topic['c_commu_id'], $u)) {
+            handle_kengen_error();
+        }
         //---