Open GoogleCodeExporter opened 9 years ago
Tested with r514 and this works fine.
root@fx:/var/www/html# diff clients-edit.php test/clients-edit.php
21c21
< $client_id = mysql_real_escape_string($_GET['id']);
---
> $client_id = $_GET['id'];
62,71d61
< /**
< * If the user is not an admin, check if the id of the client
< * that's being edited is the same as the current logged in one.
< */
< if ($global_level == 0 || $global_level == 7) {
< if ($user_id != CURRENT_USER_ID) {
< die();
< }
< }
<
Original comment by dtra...@gmail.com
on 29 Jul 2014 at 3:45
Also found this problem. Any fix?
Original comment by zsmith.r...@gmail.com
on 20 Aug 2014 at 5:34
I replaced clients-edit.php with r514 version and it works fine.
Original comment by dtra...@gmail.com
on 20 Aug 2014 at 6:01
Original issue reported on code.google.com by
dtra...@gmail.com
on 24 Jul 2014 at 2:27