[geeklog-cvs] geeklog-1.3/public_html comment.php,1.38,1.38.4.1

[dhaun at geeklog.net]

Update of /usr/cvs/geeklog/geeklog-1.3/public_html
In directory geeklog_prod:/tmp/cvs-serv23717

Modified Files:
      Tag: geeklog_1_3_7sr2_1
	comment.php 
Log Message:
Before saving a comment, make sure the user is allowed to do so and is actually who s/he claims to be.


Index: comment.php
===================================================================
RCS file: /usr/cvs/geeklog/geeklog-1.3/public_html/comment.php,v
retrieving revision 1.38
retrieving revision 1.38.4.1
diff -C2 -d -r1.38 -r1.38.4.1
*** comment.php	13 Jan 2003 18:54:45 -0000	1.38
--- comment.php	5 Dec 2003 19:29:01 -0000	1.38.4.1
***************
*** 215,219 ****
  function savecomment($uid,$save,$anon,$title,$comment,$sid,$pid,$type,$postmode) 
  {
!     global $_TABLES, $_CONF, $LANG03, $REMOTE_ADDR; 
  
      // Get signature
--- 215,226 ----
  function savecomment($uid,$save,$anon,$title,$comment,$sid,$pid,$type,$postmode) 
  {
!     global $_CONF, $_TABLES, $_USER, $LANG03, $REMOTE_ADDR; 
! 
!     if(($uid == 0) || ($uid != $_USER['uid']) ||
!             (empty ($_USER['username']) && (($_CONF['loginrequired'] == 1) ||
!             ($_CONF['commentsloginrequired'] == 1)))) {
!         $retval .= COM_refresh ($_CONF['site_url'] . '/index.php');
!         return $retval;
!     }
  
      // Get signature