ZwiiCMS-Team/ZwiiCMS
ZwiiCMS-Team/ZwiiCMS
10
9
Fork 3
Code Releases 153 Activity

13.3.06 bug de sécurité profil rfm

Browse Source
This commit is contained in:
Fred Tempez 2024-09-06 18:34:46 +02:00
parent 8fd4d2f9bc
commit 2c31e1aefc
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
core/module/user/view/profilEdit/profilEdit.php
View File

@ -152,7 +152,7 @@
<?php echo template::select('profilEditPath', $module::$sharePath, [ <?php echo template::select('profilEditPath', $module::$sharePath, [
'label' => 'Dossier', 'label' => 'Dossier',
'class' => 'filemanager', 'class' => 'filemanager',
'selected' => '.' . $this->getData(['profil', $this->getUrl(2), $this->getUrl(3), 'folder', 'path']) 'selected' => $this->getData(['profil', $this->getUrl(2), $this->getUrl(3), 'folder', 'path'])
]); ?> ]); ?>
</div> </div>
</div> </div>

2
core/vendor/filemanager/config/config.php vendored
View File

@ -54,7 +54,7 @@ if (!is_null($u) && !is_null($g) && !is_null($userId)) {
if ($g['profil'][$group][$profil]['filemanager'] === false) if ($g['profil'][$group][$profil]['filemanager'] === false)
exit('Accès interdit'); exit('Accès interdit');
// lecture du profil // lecture du profil
if (!is_null($profil)) { if (!is_null($profil) and $g['profil'][$group][$profil]['folder']['path'] !== '') {
$file = $g['profil'][$group][$profil]['file']; $file = $g['profil'][$group][$profil]['file'];
$folder = $g['profil'][$group][$profil]['folder']; $folder = $g['profil'][$group][$profil]['folder'];
$uploadDir = $g['profil'][$group][$profil]['folder']['path']; $uploadDir = $g['profil'][$group][$profil]['folder']['path'];