diff --git a/html/getkiosk.php b/html/getkiosk.php
index d3a25ad3f891a0109b2865dc2caf16a70c44c144..ba0ea77ee2f283ad87e16a06b62ea4e96f06a0c6 100644 (file)
--- a/html/getkiosk.php
+++ b/html/getkiosk.php
/* Basic setup, remove eventually registered sessions */
@require_once ("../include/php_setup.inc");
@require_once ("functions.inc");
/* Basic setup, remove eventually registered sessions */
@require_once ("../include/php_setup.inc");
@require_once ("functions.inc");
-error_reporting (E_ALL);
+error_reporting (E_ALL | E_STRICT);
session_start ();
/* Logged in? Simple security check */
if (!isset($_SESSION['ui'])){
session_start ();
/* Logged in? Simple security check */
if (!isset($_SESSION['ui'])){
- gosa_log ("Error: getkiosk.php called without session");
+ new log("security","fai","",array(),"Error: getkiosk.php called without session") ;
header ("Location: index.php");
exit;
}
header ("Location: index.php");
exit;
}
$config= $_SESSION['config'];
/* Check ACL's */
$config= $_SESSION['config'];
/* Check ACL's */
-$acl= get_permissions ($config->current['BASE'], $ui->subtreeACL);
-$acl= get_module_permission($acl, "all", $config->current['BASE']);
-if (chkacl($acl, "all") != ""){
+#FIXME Use more specific acl categories instead of all/all
+$ui = get_userinfo();
+$acl = $ui->get_permissions(base64_decode($_GET['id']),"all/all");
+if(!preg_match("/r/",$acl)){
header ("Location: index.php");
exit;
}
header ("Location: index.php");
exit;
}