senselab/codekasten
4
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

ezmlm-web.cgi: check for permission before creating a new list

Browse source
This commit is contained in:
io 2005-01-21 03:16:17 +00:00
parent 5cff702fbd
commit 3d5f407ad3
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
ezmlm-web-ng/ezmlm-web-2.1-ng/ezmlm-web.cgi
View file

@ -432,7 +432,7 @@ sub untaint {
} }
$q->import_names('Q'); $q->import_names('Q');
webauth($Q::list) == 0 || die 'Error: you are not allowed to do this!'; &webauth($Q::list) == 0 || die 'Error: you are not allowed to do this!';
} }
@ -636,6 +636,8 @@ sub allow_create_list {
sub create_list { sub create_list {
# Create a list acording to user selections ... # Create a list acording to user selections ...
&webauth_create_allowed == 0 || die 'ERROR: you are not allowed to create a new list!';
# Check the list directory exists and create if necessary ... # Check the list directory exists and create if necessary ...
if(!-e $LIST_DIR) { if(!-e $LIST_DIR) {
die "Unable to create directory ($LIST_DIR): $!" unless mkdir $LIST_DIR, 0700; die "Unable to create directory ($LIST_DIR): $!" unless mkdir $LIST_DIR, 0700;