13.3.06 bug de sécurité profil rfm

This commit is contained in:
Fred Tempez 2024-09-06 18:34:46 +02:00
parent 8fd4d2f9bc
commit 2c31e1aefc
2 changed files with 2 additions and 2 deletions

View File

@ -152,7 +152,7 @@
<?php echo template::select('profilEditPath', $module::$sharePath, [
'label' => 'Dossier',
'class' => 'filemanager',
'selected' => '.' . $this->getData(['profil', $this->getUrl(2), $this->getUrl(3), 'folder', 'path'])
'selected' => $this->getData(['profil', $this->getUrl(2), $this->getUrl(3), 'folder', 'path'])
]); ?>
</div>
</div>

View File

@ -54,7 +54,7 @@ if (!is_null($u) && !is_null($g) && !is_null($userId)) {
if ($g['profil'][$group][$profil]['filemanager'] === false)
exit('Accès interdit');
// lecture du profil
if (!is_null($profil)) {
if (!is_null($profil) and $g['profil'][$group][$profil]['folder']['path'] !== '') {
$file = $g['profil'][$group][$profil]['file'];
$folder = $g['profil'][$group][$profil]['folder'];
$uploadDir = $g['profil'][$group][$profil]['folder']['path'];