Changeset 9557 for extensions/adult_content/charte_user.php

Timestamp:

Mar 6, 2011, 1:59:34 PM (13 years ago)

Author:

flop25

Message:

activation phase without include and global var
a guest can't be logged as 16 or 18 if the admin don't want (no acces to charte.php)
a guest can't access to charte_user.php and a user can't access to charte.php

File:

• extensions/adult_content/charte_user.php (modified) (5 diffs)

extensions/adult_content/charte_user.php

@@ -3 +3 @@
 include_once(PHPWG_ROOT_PATH.'include/common.inc.php');
 $adult_content = get_plugin_data('adult_content');
-
+if ( is_a_guest() )
+{
+        redirect(make_index_url());
+}
 if (!isset( $_POST['groupe'] ))
 {
@@ -17 +20 @@
        ));
 
-   if (isset($_GET['etat']) and $_GET['etat'] == 'not_defined')
+   if (isset($_GET['etat']) and $_GET['etat'] == 'not_defined' and !is_a_guest() )
    {
        $template->assign(
@@ -27 +30 @@
          );
    }
-   elseif (isset($_GET['etat']) and $_GET['etat'] == 'defined')
+   elseif (isset($_GET['etat']) and $_GET['etat'] == 'defined' and !is_a_guest() )
    {
          $query = '
@@ -39 +42 @@
 ;';
      $data_group_n = mysql_fetch_array(pwg_query($query));
-         if ($data_group_n['name'] == '+18')
-         {
-         $statut = $lang['ac_statut'].$lang['ac_user_text_18'];
-         }
-         if ($data_group_n['name'] == '16-17')
-         {
-         $statut = $lang['ac_statut'].$lang['ac_user_text_16'];
-         }
-         if ($data_group_n['name'] == 'nothing')
-         {
-         $statut = $lang['ac_user_no'];
-         }
+                 if ($data_group_n['name'] == '+18')
+                 {
+                         $statut = $lang['ac_statut'].$lang['ac_user_text_18'];
+                 }
+                 if ($data_group_n['name'] == '16-17')
+                 {
+                         $statut = $lang['ac_statut'].$lang['ac_user_text_16'];
+                 }
+                 if ($data_group_n['name'] == 'nothing')
+                 {
+                         $statut = $lang['ac_user_no'];
+                 }
          
      $main = '<p>'.$statut.'</p>'
@@ -64 +67 @@
    else
    {
-   die('Hacking attempt!');
+                redirect(make_index_url());
    }