From a2efd1bd8e480226d4c285ec8fcce78497a76f23 Mon Sep 17 00:00:00 2001
From: mcramer <m.cramer@pixcept.de>
Date: Wed, 14 Aug 2013 05:29:03 -0400
Subject: [PATCH] - Fixed: new security permission checks prevented clients from changing php version
---
interface/web/sites/ajax_get_json.php | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/interface/web/sites/ajax_get_json.php b/interface/web/sites/ajax_get_json.php
index f2e60f4..594229c 100644
--- a/interface/web/sites/ajax_get_json.php
+++ b/interface/web/sites/ajax_get_json.php
@@ -72,7 +72,7 @@
// get client id
$sql_where = '';
if($_SESSION["s"]["user"]["typ"] != 'admin'){
- $sql_where = " AND client_id = ".$_SESSION["s"]["user"]["client_id"];
+ $sql_where = " AND (client_id = 0 OR client_id = ".$_SESSION["s"]["user"]["client_id"] . ")";
}
if($php_type == 'php-fpm'){
--
Gitblit v1.9.1