From b6ff2e1bd5c4dd8ecd8fad575ca201a0cd5cc8dd Mon Sep 17 00:00:00 2001
From: tbrehm <t.brehm@ispconfig.org>
Date: Thu, 14 Jan 2010 09:42:56 -0500
Subject: [PATCH] Fixed: FS#907 - possible security issue deleting maildir .. plugin module [ mail_plugin.inc.php ]
---
interface/web/admin/groups_edit.php | 7 ++-----
1 files changed, 2 insertions(+), 5 deletions(-)
diff --git a/interface/web/admin/groups_edit.php b/interface/web/admin/groups_edit.php
index d649f40..d2acf2b 100644
--- a/interface/web/admin/groups_edit.php
+++ b/interface/web/admin/groups_edit.php
@@ -41,11 +41,8 @@
require_once('../../lib/config.inc.php');
require_once('../../lib/app.inc.php');
-// Checking module permissions
-if(!stristr($_SESSION["s"]["user"]["modules"],$_SESSION["s"]["module"]["name"])) {
- header("Location: ../index.php");
- exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('admin');
// Loading classes
$app->uses('tpl,tform,tform_actions');
--
Gitblit v1.9.1