[Fmsystem-commits] [14898] allow/deny test

[Sigurd Nes]

Revision: 14898
          http://svn.sv.gnu.org/viewvc/?view=rev&root=fmsystem&revision=14898
Author:   sigurdne
Date:     2016-04-06 13:59:51 +0000 (Wed, 06 Apr 2016)
Log Message:
-----------
allow/deny test

Modified Paths:
--------------
    trunk/activitycalendarfrontend/inc/class.uiactivity.inc.php
    trunk/activitycalendarfrontend/templates/base/config.tpl

Modified: trunk/activitycalendarfrontend/inc/class.uiactivity.inc.php
===================================================================
--- trunk/activitycalendarfrontend/inc/class.uiactivity.inc.php 2016-04-06 
13:42:03 UTC (rev 14897)
+++ trunk/activitycalendarfrontend/inc/class.uiactivity.inc.php 2016-04-06 
13:59:51 UTC (rev 14898)
@@ -38,6 +38,16 @@
 
                public function test_sql_injection()
                {
+                       $c = createobject('phpgwapi.config', 
'activitycalendarfrontend');
+                       $c->read();
+                       $config = $c->config_data;
+
+                       $allow_test = $c->config_data['allow_test'];
+                       if($allow_test != 1)
+                       {
+                               echo "<H1>Test not activated in config</H>";
+                               exit;
+                       }
                        $GLOBALS['phpgw_info']['flags']['noheader'] = true;
                        $GLOBALS['phpgw_info']['flags']['nofooter'] = true;
                        $GLOBALS['phpgw_info']['flags']['xslt_app'] = false;

Modified: trunk/activitycalendarfrontend/templates/base/config.tpl
===================================================================
--- trunk/activitycalendarfrontend/templates/base/config.tpl    2016-04-06 
13:42:03 UTC (rev 14897)
+++ trunk/activitycalendarfrontend/templates/base/config.tpl    2016-04-06 
13:59:51 UTC (rev 14898)
@@ -30,6 +30,15 @@
                        <td><input type="password" 
name="newsettings[anonymous_passwd]" value="{value_anonymous_passwd}"></td>
                </tr>
                <tr bgcolor="{row_on}">
+                       <td>{lang_allow_test_for_sql_injection}:</td>
+                       <td>
+                               <select name="newsettings[allow_test]">
+                                       <option value="" 
{selected_allow_test_}>NO</option>
+                                       <option value="1" 
{selected_allow_test_1}>YES</option>
+                               </select>
+                       </td>
+               </tr>
+               <tr bgcolor="{row_on}">
 
                        <!-- END body -->