[geeklog-cvs] Auth_Enterprise/Server/providers AEPearDBProvider.class.php,1.1.1.1,1.2

tony at iowaoutdoors.org tony at iowaoutdoors.org
Wed Jun 16 01:24:32 EDT 2004


Update of /var/cvs/Auth_Enterprise/Server/providers
In directory www:/tmp/cvs-serv26535

Modified Files:
	AEPearDBProvider.class.php 
Log Message:
Added one security check

Index: AEPearDBProvider.class.php
===================================================================
RCS file: /var/cvs/Auth_Enterprise/Server/providers/AEPearDBProvider.class.php,v
retrieving revision 1.1.1.1
retrieving revision 1.2
diff -C2 -d -r1.1.1.1 -r1.2
*** AEPearDBProvider.class.php	15 Jun 2004 15:19:27 -0000	1.1.1.1
--- AEPearDBProvider.class.php	16 Jun 2004 05:24:30 -0000	1.2
***************
*** 170,173 ****
--- 170,174 ----
              if ($this->db->provides('transactions')) {
                  $this->db->rollback();
+                 $this->db->autoCommit(true);
              }
              
***************
*** 284,288 ****
          
          // Need to verify the they have right Auth_Enterprise privilege
!         if (!$userObj->authorize(AE_ACCOUNT_MGR)) {
              throw new AEUserNotAuthorized("User $adminUserName does not have sufficient privileges
                  to change the password for $userName");
--- 285,289 ----
          
          // Need to verify the they have right Auth_Enterprise privilege
!         if (!$userObj->authorize('AE_ACCOUNT_MGR')) {
              throw new AEUserNotAuthorized("User $adminUserName does not have sufficient privileges
                  to change the password for $userName");




More information about the geeklog-cvs mailing list