Stop allowing anonymous test results
This commit is contained in:
@@ -802,10 +802,18 @@ class Version {
|
|||||||
$oTest->ShowVersionsTestingTable($_SERVER['PHP_SELF']."?iVersionId=".$this->iVersionId."&iTestingId=",
|
$oTest->ShowVersionsTestingTable($_SERVER['PHP_SELF']."?iVersionId=".$this->iVersionId."&iTestingId=",
|
||||||
5);
|
5);
|
||||||
}
|
}
|
||||||
echo '<form method=post name=sMessage action=testResults.php?sSub=view&iVersionId='.$this->iVersionId.'>';
|
if($_SESSION['current']->isLoggedIn())
|
||||||
echo '<input type=submit value="Add Testing Data" class="button" />';
|
{
|
||||||
echo '</form>';
|
echo '<form method=post name=sMessage action=testResults.php?sSub=view&iVersionId='.$this->iVersionId.'>';
|
||||||
|
echo '<input type=submit value="Add Testing Data" class="button" />';
|
||||||
|
echo '</form>';
|
||||||
|
} else
|
||||||
|
{
|
||||||
|
echo '<form method="post" name="sMessage" action="account.php">';
|
||||||
|
echo '<input type="hidden" name="sCmd" value="login">';
|
||||||
|
echo '<input type=submit value="Log in add Testing Data" class="button">';
|
||||||
|
echo '</form>';
|
||||||
|
}
|
||||||
echo "</td></tr>";
|
echo "</td></tr>";
|
||||||
|
|
||||||
/* close the table */
|
/* close the table */
|
||||||
|
|||||||
@@ -18,6 +18,10 @@ $aClean['iVersionId'] = makeSafe($_REQUEST['iVersionId']);
|
|||||||
$aClean['iDistributionId'] = makeSafe($_REQUEST['iDistributionId']);
|
$aClean['iDistributionId'] = makeSafe($_REQUEST['iDistributionId']);
|
||||||
$aClean['sDistribution'] = makeSafe($_REQUEST['sDistribution']);
|
$aClean['sDistribution'] = makeSafe($_REQUEST['sDistribution']);
|
||||||
|
|
||||||
|
//deny access if not logged on
|
||||||
|
if(!$_SESSION['current']->isLoggedIn())
|
||||||
|
util_show_error_page_and_exit("Insufficient privileges to create test results. Are you sure you are logged in?");
|
||||||
|
|
||||||
|
|
||||||
if ($aClean['sSub'])
|
if ($aClean['sSub'])
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user