phpgroupware-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Phpgroupware-cvs] sitemgr/inc class.Content_UI.inc.php,1.3.2.5


From: Caeies
Subject: [Phpgroupware-cvs] sitemgr/inc class.Content_UI.inc.php,1.3.2.5
Date: Wed, 12 Oct 2005 14:43:00 +0200

Update of sitemgr/inc

Modified Files:
     Branch: Version-0_9_16-branch
            class.Content_UI.inc.php lines: +10 -1

Log Message:
Allow sitemgr admin to put what they want in HTML tags ...

====================================================
Index: sitemgr/inc/class.Content_UI.inc.php
diff -u sitemgr/inc/class.Content_UI.inc.php:1.3.2.4 
sitemgr/inc/class.Content_UI.inc.php:1.3.2.5
--- sitemgr/inc/class.Content_UI.inc.php:1.3.2.4        Mon Sep 26 03:39:50 2005
+++ sitemgr/inc/class.Content_UI.inc.php        Wed Oct 12 12:43:56 2005
@@ -147,7 +147,16 @@
                                        $GLOBALS['data_cleaner'] = 
createObject('phpgwapi.data_cleaner', '');
                                }

-                               $element = 
clean_vars($GLOBALS['RAW_REQUEST']['element'], false);
+                               //XXX Caeies : Ok we can consider than somebody 
who is "sitemgr admin" is able to play as he want with Style and other 
dangerous stuff
+                               // We can perhaps add something global to 
configure it ...
+                               if($GLOBALS['Common_BO']->acl->is_admin())
+                               {
+                                       $element = 
$GLOBALS['RAW_REQUEST']['element'];
+                               }
+                               else
+                               {
+                                       $element = 
clean_vars($GLOBALS['RAW_REQUEST']['element'], false);
+                               }

                                $block = CreateObject('sitemgr.Block_SO',True);
                                $block->id = $inputblockid;






reply via email to

[Prev in Thread] Current Thread [Next in Thread]