[geeklog-cvs] geeklog-1.3/public_html comment.php,1.44,1.44.2.1

[dhaun at geeklog.net]

Update of /usr/cvs/geeklog/geeklog-1.3/public_html
In directory geeklog_prod:/tmp/cvs-serv23834

Modified Files:
      Tag: geeklog_1_3_8_1_1
	comment.php 
Log Message:
Before saving a comment, make sure the user is allowed to do so and is actually who s/he claims to be.


Index: comment.php
===================================================================
RCS file: /usr/cvs/geeklog/geeklog-1.3/public_html/comment.php,v
retrieving revision 1.44
retrieving revision 1.44.2.1
diff -C2 -d -r1.44 -r1.44.2.1
*** comment.php	25 Jun 2003 08:39:02 -0000	1.44
--- comment.php	5 Dec 2003 19:33:12 -0000	1.44.2.1
***************
*** 229,232 ****
--- 229,239 ----
      $retval = '';
  
+     if(($uid == 0) || ($uid != $_USER['uid']) ||
+             (empty ($_USER['username']) && (($_CONF['loginrequired'] == 1) ||
+             ($_CONF['commentsloginrequired'] == 1)))) {
+         $retval .= COM_refresh ($_CONF['site_url'] . '/index.php');
+         return $retval;
+     }
+ 
      // Get signature
      $sig = '';