mirror of
https://github.com/phpbb/phpbb.git
synced 2025-06-27 21:58:52 +00:00
Let's add some more checks. #54295
git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10308 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
parent
aedff9c97a
commit
25545c06b2
1 changed files with 19 additions and 9 deletions
|
@ -66,10 +66,7 @@ if ($feed === false)
|
|||
}
|
||||
|
||||
// Open Feed
|
||||
if ($feed->open() === false)
|
||||
{
|
||||
trigger_error('NO_FEED');
|
||||
}
|
||||
$feed->open();
|
||||
|
||||
// Iterate through items
|
||||
while ($row = $feed->get_item())
|
||||
|
@ -480,25 +477,33 @@ class phpbb_feed
|
|||
|
||||
function open()
|
||||
{
|
||||
global $db, $user;
|
||||
global $auth, $db, $user;
|
||||
|
||||
if ($this->topic_id)
|
||||
{
|
||||
$sql = 'SELECT topic_title
|
||||
// Topic feed
|
||||
$sql = 'SELECT forum_id
|
||||
FROM ' . TOPICS_TABLE . '
|
||||
WHERE topic_id = ' . $this->topic_id;
|
||||
$result = $db->sql_query($sql);
|
||||
$row = $db->sql_fetchrow($result);
|
||||
$this->forum_id = (int) $row['forum_id'];
|
||||
$db->sql_freeresult($result);
|
||||
|
||||
if (empty($row))
|
||||
{
|
||||
return false;
|
||||
trigger_error('NO_TOPIC');
|
||||
}
|
||||
|
||||
if (!$auth->acl_get('f_read', $this->forum_id))
|
||||
{
|
||||
trigger_error('SORRY_AUTH_READ');
|
||||
}
|
||||
}
|
||||
else if ($this->forum_id)
|
||||
{
|
||||
$sql = 'SELECT forum_name
|
||||
// Forum feed
|
||||
$sql = 'SELECT forum_id
|
||||
FROM ' . FORUMS_TABLE . '
|
||||
WHERE forum_id = ' . $this->forum_id;
|
||||
$result = $db->sql_query($sql);
|
||||
|
@ -507,7 +512,12 @@ class phpbb_feed
|
|||
|
||||
if (empty($row))
|
||||
{
|
||||
return false;
|
||||
trigger_error('NO_FORUM');
|
||||
}
|
||||
|
||||
if (!$auth->acl_get('f_read', $this->forum_id))
|
||||
{
|
||||
trigger_error('SORRY_AUTH_READ');
|
||||
}
|
||||
}
|
||||
|
||||
|
|
Loading…
Add table
Reference in a new issue