fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-05 09:41:40 +09:00
Code Issues Projects Releases Packages Wiki Activity

권한 취약점 패치

Browse source 
#2083
This commit is contained in:
howtoxe 2017-05-07 10:16:08 +09:00 • committed by Kijin Sung
parent b991869463
commit f104802ea2
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/board/board.mobile.php
View file

@ -13,7 +13,7 @@ class boardMobile extends boardView
if($this->module_info->list_count) $this->list_count = $this->module_info->list_count;
if($this->module_info->mobile_list_count) $this->list_count = $this->module_info->mobile_list_count;
if($this->module_info->search_list_count) $this->search_list_count = $this->module_info->search_list_count;
if($this->module_info->mobile_search_list_count) $this->search_list_count = $this->module_info->mobile_search_list_count;
if($this->module_info->mobile_search_list_count) $this->search_list_count = $this->module_info->mobile_search_list_count;
if($this->module_info->page_count) $this->page_count = $this->module_info->page_count;
if($this->module_info->mobile_page_count) $this->page_count = $this->module_info->mobile_page_count;
$this->except_notice = $this->module_info->except_notice == 'N' ? false : true;
@ -92,6 +92,12 @@ class boardMobile extends boardView
{
return new Object(-1, "msg_invalid_request");
}
if($this->grant->view == false || ($this->module_info->consultation == 'Y' && !$this->grant->manager && !$this->grant->consultation_read))
{
return new Object(-1, "msg_not_permitted");
}
$oDocument = $oDocumentModel->getDocument($document_srl);
if(!$oDocument->isExists())
{