From 82ace9f077decc5e3634272cf5ba88e41b15be33 Mon Sep 17 00:00:00 2001 From: "Paul S. Owen" Date: Mon, 18 Mar 2002 23:56:36 +0000 Subject: [PATCH] Non-authed user could potentially utilise topic_review to read denied forums .... thanks Ashe git-svn-id: file:///svn/phpbb/trunk@2330 89ea8834-ac86-4346-8a33-228a782c2dd0 --- phpBB/includes/topic_review.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/phpBB/includes/topic_review.php b/phpBB/includes/topic_review.php index 04667cef78..54afbbc074 100644 --- a/phpBB/includes/topic_review.php +++ b/phpBB/includes/topic_review.php @@ -66,6 +66,11 @@ function topic_review($topic_id, $is_inline_review) $is_auth = array(); $is_auth = auth(AUTH_ALL, $forum_id, $userdata, $forum_row); + + if ( !$is_auth['auth_read'] ) + { + message_die(GENERAL_MESSAGE, sprintf($lang['Sorry_auth_read'], $is_auth['auth_read_type'])); + } } //