thorsten /
phpMyFAQ
| @@ 194-217 (lines=24) @@ | ||
| 191 | } |
|
| 192 | } |
|
| 193 | ||
| 194 | if ($groupAction == 'delete' && $user->perm->checkRight($user->getUserId(), 'delgroup')) { |
|
| 195 | $message = ''; |
|
| 196 | $user = new User($faqConfig); |
|
| 197 | $groupId = Filter::filterInput(INPUT_POST, 'group_id', FILTER_VALIDATE_INT, 0); |
|
| 198 | $csrfOkay = true; |
|
| 199 | $csrfToken = Filter::filterInput(INPUT_POST, 'csrf', FILTER_SANITIZE_STRING); |
|
| 200 | if (!isset($_SESSION['phpmyfaq_csrf_token']) || $_SESSION['phpmyfaq_csrf_token'] !== $csrfToken) { |
|
| 201 | $csrfOkay = false; |
|
| 202 | } |
|
| 203 | $groupAction = $defaultGroupAction; |
|
| 204 | if ($groupId <= 0) { |
|
| 205 | $message .= sprintf('<p class="alert alert-danger">%s</p>', $PMF_LANG['ad_user_error_noId']); |
|
| 206 | } else { |
|
| 207 | if (!$user->perm->deleteGroup($groupId) && !$csrfOkay) { |
|
| 208 | $message .= sprintf('<p class="alert alert-danger">%s</p>', $PMF_LANG['ad_group_error_delete']); |
|
| 209 | } else { |
|
| 210 | $message .= sprintf('<p class="alert alert-success">%s</p>', $PMF_LANG['ad_group_deleted']); |
|
| 211 | } |
|
| 212 | $userError = $user->error(); |
|
| 213 | if ($userError != '') { |
|
| 214 | $message .= sprintf('<p class="alert alert-danger">%s</p>', $userError); |
|
| 215 | } |
|
| 216 | } |
|
| 217 | } |
|
| 218 | ||
| 219 | if ($groupAction == 'addsave' && $user->perm->checkRight($user->getUserId(), 'addgroup')) { |
|
| 220 | $user = new User($faqConfig); |
|
| @@ 168-191 (lines=24) @@ | ||
| 165 | } |
|
| 166 | } |
|
| 167 | ||
| 168 | if ($sectionAction == 'delete' && $user->perm->checkRight($user->getUserId(), 'delete_section')) { |
|
| 169 | $message = ''; |
|
| 170 | $user = new User($faqConfig); |
|
| 171 | $sectionId = Filter::filterInput(INPUT_POST, 'section_id', FILTER_VALIDATE_INT, 0); |
|
| 172 | $csrfOkay = true; |
|
| 173 | $csrfToken = Filter::filterInput(INPUT_POST, 'csrf', FILTER_SANITIZE_STRING); |
|
| 174 | if (!isset($_SESSION['phpmyfaq_csrf_token']) || $_SESSION['phpmyfaq_csrf_token'] !== $csrfToken) { |
|
| 175 | $csrfOkay = false; |
|
| 176 | } |
|
| 177 | $sectionAction = $defaultSectionAction; |
|
| 178 | if ($sectionId <= 0) { |
|
| 179 | $message .= sprintf('<p class="alert alert-danger">%s</p>', $PMF_LANG['ad_user_error_noId']); |
|
| 180 | } else { |
|
| 181 | if (!$user->perm->deleteSection($sectionId) && !$csrfOkay) { |
|
| 182 | $message .= sprintf('<p class="alert alert-danger">%s</p>', $PMF_LANG['ad_section_error_delete']); |
|
| 183 | } else { |
|
| 184 | $message .= sprintf('<p class="alert alert-success">%s</p>', $PMF_LANG['ad_section_deleted']); |
|
| 185 | } |
|
| 186 | $userError = $user->error(); |
|
| 187 | if ($userError != '') { |
|
| 188 | $message .= sprintf('<p class="alert alert-danger">%s</p>', $userError); |
|
| 189 | } |
|
| 190 | } |
|
| 191 | } |
|
| 192 | ||
| 193 | if ($sectionAction == 'addsave' && $user->perm->checkRight($user->getUserId(), 'add_section')) { |
|
| 194 | $user = new User($faqConfig); |
|
