ezmlm-web.cgi: check for permission before creating a new list
This commit is contained in:
parent
5cff702fbd
commit
3d5f407ad3
1 changed files with 3 additions and 1 deletions
|
@ -432,7 +432,7 @@ sub untaint {
|
|||
}
|
||||
$q->import_names('Q');
|
||||
|
||||
webauth($Q::list) == 0 || die 'Error: you are not allowed to do this!';
|
||||
&webauth($Q::list) == 0 || die 'Error: you are not allowed to do this!';
|
||||
|
||||
}
|
||||
|
||||
|
@ -636,6 +636,8 @@ sub allow_create_list {
|
|||
sub create_list {
|
||||
# Create a list acording to user selections ...
|
||||
|
||||
&webauth_create_allowed == 0 || die 'ERROR: you are not allowed to create a new list!';
|
||||
|
||||
# Check the list directory exists and create if necessary ...
|
||||
if(!-e $LIST_DIR) {
|
||||
die "Unable to create directory ($LIST_DIR): $!" unless mkdir $LIST_DIR, 0700;
|
||||
|
|
Loading…
Reference in a new issue