svn commit: r335 - trunk/mapbender/http/php/mod_loadCapabilities.php

[uli at osgeo.org]

Author: uli
Date: 2006-05-24 09:45:07+0000
New Revision: 335

Modified:
   trunk/mapbender/http/php/mod_loadCapabilities.php

Log:
validation of permissions included

Modified: trunk/mapbender/http/php/mod_loadCapabilities.php
Url: https://mapbender.osgeo.org/source/browse/mapbender/trunk/mapbender/http/php/mod_loadCapabilities.php?view=diff&rev=335&p1=trunk/mapbender/http/php/mod_loadCapabilities.php&p2=trunk/mapbender/http/php/mod_loadCapabilities.php&r1=334&r2=335
==============================================================================
--- trunk/mapbender/http/php/mod_loadCapabilities.php	(original)
+++ trunk/mapbender/http/php/mod_loadCapabilities.php	2006-05-24 09:45:07+0000
@@ -21,7 +21,9 @@
 include("../../conf/mapbender.conf");
 $con = db_connect(DBSERVER,OWNER,PW);
 db_select_db(DB,$con);
-include("../php/mb_validateSession.php");
+include("../php/mb_validatePermission.php");
+$secParams = SID."&guiID=".$_REQUEST["guiID"]."&elementID=".$_REQUEST["elementID"];
+$self = $PHP_SELF."?".$secParams;
 import_request_variables("PG");
 ?>
 
@@ -79,7 +81,7 @@
 		}
 		else{
 			var gui_id=document.form1.guiList.options[listIndex].value;
-			document.form1.action='../php/mod_loadwms.php';
+			document.form1.action = '../php/mod_loadwms.php?<?php echo $secParams ?>';
 			document.form1.submit();
 		}
 	}
@@ -90,12 +92,11 @@
 
 <?php
 
-
 require_once("../classes/class_administration.php");
 $admin = new administration();
 $ownguis = $admin->getGuisByOwner($_SESSION["mb_user_id"]);
 
-echo "<form name='form1' action='" . $PHP_SELF . "?".SID."' method='post'>";
+echo "<form name='form1' action='" . $self ."' method='post'>";
 echo "<table cellpadding='0' cellspacing='0' border='0'>";
 echo "<tr>";
 echo "<td>";