From 81e1f83025cfbdaabdf3a8fbb6126b5a372ac3cc Mon Sep 17 00:00:00 2001
From: mcramer <m.cramer@pixcept.de>
Date: Fri, 09 Aug 2013 08:12:05 -0400
Subject: [PATCH] - Implemented:  FS#3077 - Add gender field for client  - Implemented:  FS#1312 - disabling a whole client     -> see bugtracker comments for more details - Fixed:  FS#3060 - Subdomain vhost ip update on web domain update - Implemented:  FS#3078 - Change client template system: delete specific template from limits      -> including link in billing module to link specific assigned templates - Fixed:  FS#3058 - Error in mail quota calculation when changing tab in mailboxe configuration     -> quota limit no longer checked if it was not changed - Fixed: Deleting a client's template could mess up his assigned templates - Added: remoting functions to change client templates the new way

---
 interface/web/sites/web_folder_user_edit.php |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/interface/web/sites/web_folder_user_edit.php b/interface/web/sites/web_folder_user_edit.php
index 75a2caf..c67e823 100644
--- a/interface/web/sites/web_folder_user_edit.php
+++ b/interface/web/sites/web_folder_user_edit.php
@@ -55,7 +55,8 @@
 		global $app, $conf;
 		
 		// Get the record of the parent domain
-		$folder = $app->db->queryOneRecord("select server_id FROM web_folder WHERE web_folder_id = ".intval(@$this->dataRecord["web_folder_id"]));
+		$folder = $app->db->queryOneRecord("select * FROM web_folder WHERE web_folder_id = ".$app->functions->intval(@$this->dataRecord["web_folder_id"]) . " AND ".$app->tform->getAuthSQL('r'));
+        if(!$folder || $folder['web_folder_id'] != @$this->dataRecord['web_folder_id']) $app->tform->errorMessage .= $app->tform->lng("no_folder_perm");
 		
 		// Set a few fixed values
 		$this->dataRecord["server_id"] = $folder["server_id"];

--
Gitblit v1.9.1