Changeset 10062

Timestamp:

Apr 5, 2011, 3:12:57 PM (13 years ago)

Author:

mistic100

Message:

merge r10061 from trunk : ws_getInfos is restrcited to admins (bug:1023)

File:

• branches/2.2/include/ws_functions.inc.php (modified) (2 diffs, 1 prop)

branches/2.2/include/ws_functions.inc.php

@@ -187 +187 @@
 function ws_getInfos($params, &$service)
 {
-  global $conf;
-  
-  if ($conf['show_version'] or is_admin())
-  {
-    $infos['version'] = PHPWG_VERSION;
-  }
+  if (!is_admin())
+  {
+    return new PwgError(403, 'Forbidden');
+  }
+
+  $infos['version'] = PHPWG_VERSION;
         
   $query = 'SELECT COUNT(*) FROM '.IMAGES_TABLE.';';
@@ -232 +232 @@
 
   // unvalidated comments
-  if ($infos['nb_comments'] > 0 and is_admin())
+  if ($infos['nb_comments'] > 0)
   {
     $query = 'SELECT COUNT(*) FROM '.COMMENTS_TABLE.' WHERE validated=\'false\';';