makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-27 21:58:52 +00:00
Code Issues Projects Releases Packages Wiki Activity

Let's add some more checks. #54295

Browse source 
git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10308 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Andreas Fischer 2009-12-09 21:33:25 +00:00
parent aedff9c97a
commit 25545c06b2
1 changed files with 19 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
phpBB/feed.php
View file

@ -66,10 +66,7 @@ if ($feed === false)
} }
// Open Feed // Open Feed
if ($feed->open() === false) $feed->open();
{
trigger_error('NO_FEED');
}
// Iterate through items // Iterate through items
while ($row = $feed->get_item()) while ($row = $feed->get_item())
@ -480,25 +477,33 @@ class phpbb_feed
function open() function open()
{ {
global $db, $user; global $auth, $db, $user;
if ($this->topic_id) if ($this->topic_id)
{ {
$sql = 'SELECT topic_title // Topic feed
$sql = 'SELECT forum_id
FROM ' . TOPICS_TABLE . ' FROM ' . TOPICS_TABLE . '
WHERE topic_id = ' . $this->topic_id; WHERE topic_id = ' . $this->topic_id;
$result = $db->sql_query($sql); $result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result); $row = $db->sql_fetchrow($result);
$this->forum_id = (int) $row['forum_id'];
$db->sql_freeresult($result); $db->sql_freeresult($result);
if (empty($row)) if (empty($row))
{ {
return false; trigger_error('NO_TOPIC');
}
if (!$auth->acl_get('f_read', $this->forum_id))
{
trigger_error('SORRY_AUTH_READ');
} }
} }
else if ($this->forum_id) else if ($this->forum_id)
{ {
$sql = 'SELECT forum_name // Forum feed
$sql = 'SELECT forum_id
FROM ' . FORUMS_TABLE . ' FROM ' . FORUMS_TABLE . '
WHERE forum_id = ' . $this->forum_id; WHERE forum_id = ' . $this->forum_id;
$result = $db->sql_query($sql); $result = $db->sql_query($sql);
@ -507,7 +512,12 @@ class phpbb_feed
if (empty($row)) if (empty($row))
{ {
return false; trigger_error('NO_FORUM');
}
if (!$auth->acl_get('f_read', $this->forum_id))
{
trigger_error('SORRY_AUTH_READ');
} }
} }