svn commit: r337 - trunk/mapbender/http/php/mod_updateWMS.php

Wed May 24 05:51:08 EDT 2006

Author: uli
Date: 2006-05-24 09:51:08+0000
New Revision: 337

Modified:
   trunk/mapbender/http/php/mod_updateWMS.php

Log:
validation of permissions included

Modified: trunk/mapbender/http/php/mod_updateWMS.php
Url: https://mapbender.osgeo.org/source/browse/mapbender/trunk/mapbender/http/php/mod_updateWMS.php?view=diff&rev=337&p1=trunk/mapbender/http/php/mod_updateWMS.php&p2=trunk/mapbender/http/php/mod_updateWMS.php&r1=336&r2=337
==============================================================================

--- trunk/mapbender/http/php/mod_updateWMS.php	(original)
+++ trunk/mapbender/http/php/mod_updateWMS.php	2006-05-24 09:51:08+0000
@@ -18,11 +18,13 @@
 # Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
 
 session_start();
-
-require_once("mb_validateInput.php");
 require_once("../../conf/mapbender.conf");
+$con = db_connect(DBSERVER,OWNER,PW);
+require_once("mb_validatePermission.php");
 require_once("../classes/class_wms.php"); 
 import_request_variables("PG");
+$secParams = SID."&guiID=".$_REQUEST["guiID"]."&elementID=".$_REQUEST["elementID"];
+$self = $PHP_SELF."?".$secParams;
 ?>
 <html>
 <head>
@@ -53,10 +55,10 @@
 </script>
 </head>
 <body>
-<form name='form1' action='<?php  $PHP_SELF ?>' method='POST'>
+<form name='form1' action='<?php  $self ?>' method='POST'>
 <?php
 
-$con = db_connect(DBSERVER,OWNER,PW);
+
 
 require_once("../classes/class_administration.php");
 $admin = new administration();
@@ -102,7 +104,6 @@
 
 /**/
 if(isset($myURL) && $myURL != ''){
-	$myURL=mb_validateInput($myURL);
 
 	$mywms = new wms();
 	$mywms->createObjFromXML($myURL);    


