35 |
exit -2; |
exit -2; |
36 |
} |
} |
37 |
|
|
38 |
|
$cn=DbConnect($_SESSION['g_dossier']); |
39 |
// TODO add security here |
// TODO add security here |
40 |
// Get The priv on the selected folder |
// Get The priv on the selected folder |
41 |
if ( $User->admin == 0 ) { |
if ( $User->CheckAction($cn,FICHE_WRITE)== 0) { |
|
$r=CheckAction($_SESSION['g_dossier'],$_SESSION['g_user'],FICHE_WRITE); |
|
|
if ($r == 0 ){ |
|
42 |
/* Cannot Access */ |
/* Cannot Access */ |
43 |
echo '<h2 class="error"> Vous ne pouvez pas ajouter de fiche</h2>'; |
echo '<h2 class="error"> Vous ne pouvez pas ajouter de fiche</h2>'; |
44 |
return; |
return; |
|
} |
|
45 |
} |
} |
46 |
|
|
47 |
include_once("fiche_inc.php"); |
include_once("fiche_inc.php"); |
|
$cn=DbConnect($_SESSION['g_dossier']); |
|
48 |
foreach ($HTTP_GET_VARS as $key=>$element) { |
foreach ($HTTP_GET_VARS as $key=>$element) { |
49 |
// The value are e_name e_type e_PHPSESSID |
// The value are e_name e_type e_PHPSESSID |
50 |
${"e_$key"}=$element; |
${"e_$key"}=$element; |