From ed2cbe739d883e996a93626db1507ca80e0d087e Mon Sep 17 00:00:00 2001
From: Tony Lambregts <tony.lambregts@gmail.com>
Date: Sun, 16 Jul 2006 05:39:56 +0000
Subject: [PATCH] Stop allowing anonymous test results

---
 include/version.php | 16 ++++++++++++----
 testResults.php     |  4 ++++
 2 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/include/version.php b/include/version.php
index db3b83c..79d1e2c 100644
--- a/include/version.php
+++ b/include/version.php
@@ -802,10 +802,18 @@ class Version {
             $oTest->ShowVersionsTestingTable($_SERVER['PHP_SELF']."?iVersionId=".$this->iVersionId."&iTestingId=",
                                              5);
         }
-        echo '<form method=post name=sMessage action=testResults.php?sSub=view&iVersionId='.$this->iVersionId.'>';
-        echo '<input type=submit value="Add Testing Data" class="button" />';
-        echo '</form>';
-
+        if($_SESSION['current']->isLoggedIn())
+        {
+            echo '<form method=post name=sMessage action=testResults.php?sSub=view&iVersionId='.$this->iVersionId.'>';
+            echo '<input type=submit value="Add Testing Data" class="button" />';
+            echo '</form>';
+        } else
+        {
+            echo '<form method="post" name="sMessage" action="account.php">';
+            echo '<input type="hidden" name="sCmd" value="login">';
+            echo '<input type=submit value="Log in add Testing Data" class="button">';
+            echo '</form>';
+        }
         echo "</td></tr>";
     
         /* close the table */
diff --git a/testResults.php b/testResults.php
index a074db8..a7ade65 100644
--- a/testResults.php
+++ b/testResults.php
@@ -18,6 +18,10 @@ $aClean['iVersionId'] = makeSafe($_REQUEST['iVersionId']);
 $aClean['iDistributionId'] = makeSafe($_REQUEST['iDistributionId']);
 $aClean['sDistribution'] = makeSafe($_REQUEST['sDistribution']);
 
+//deny access if not logged on
+if(!$_SESSION['current']->isLoggedIn())
+    util_show_error_page_and_exit("Insufficient privileges to create test results.  Are you sure you are logged in?");
+
 
 if ($aClean['sSub'])
 {