From 2cb1563f63386b35a69e460051aa9b4a2851d104 Mon Sep 17 00:00:00 2001
From: ftimme <ft@falkotimme.com>
Date: Wed, 30 May 2012 07:30:44 -0400
Subject: [PATCH] - Added (clickable) placeholders to client messaging function. - Added check so that the client password isn't inserted into the message (for security reasons).
---
interface/web/help/support_message_list.php | 9 +++------
1 files changed, 3 insertions(+), 6 deletions(-)
diff --git a/interface/web/help/support_message_list.php b/interface/web/help/support_message_list.php
index 5fc45e5..dcf779e 100644
--- a/interface/web/help/support_message_list.php
+++ b/interface/web/help/support_message_list.php
@@ -5,17 +5,14 @@
//* Path to the list definition file
$list_def_file = "list/support_message.list.php";
-//* Check the module permissions
-if(!stristr($_SESSION["s"]["user"]["modules"],'help')) {
- header("Location: ../index.php");
- exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('help');
//* Loading the class
$app->uses('listform_actions');
//* Optional limit
-// $app->listform_actions->SQLExtWhere = "type = 'alias'";
+$app->listform_actions->SQLExtWhere = "recipient_id = ".$_SESSION['s']['user']['userid'];
//* Start the form rendering and action ahndling
$app->listform_actions->onLoad();
--
Gitblit v1.9.1