diff --git a/core/core.php b/core/core.php index f6dff366..4bb5a593 100755 --- a/core/core.php +++ b/core/core.php @@ -40,7 +40,7 @@ class common { const ACCESS_TIMER = 1800; // Numéro de version - const ZWII_VERSION = '10.3.09'; + const ZWII_VERSION = '10.3.10'; const ZWII_UPDATE_CHANNEL = "v10"; public static $actions = []; @@ -1843,6 +1843,17 @@ class core extends common { $access = false; } } + // Empêcher l'accès aux page désactivée par URL directe + if ( ( $this->getData(['page', $this->getUrl(0),'disable']) === true + AND $this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD') + ) OR ( + $this->getData(['page', $this->getUrl(0),'disable']) === true + AND $this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD') + AND $this->getUser('group') < self::GROUP_MODERATOR + ) + ){ + $access = false; + } } /**