X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=html%2Fgetfax.php;h=abf40da83d30930a9b6fa0abb11f49d4fc104a0c;hb=e15935617131743471cdc8cedc4825fc7e9692ef;hp=cff889f09e357a31adfc48255227d8f84ef13914;hpb=e299f0ca47a924516f2afbe4e922f2418b75315c;p=gosa.git diff --git a/html/getfax.php b/html/getfax.php index cff889f09..abf40da83 100644 --- a/html/getfax.php +++ b/html/getfax.php @@ -27,15 +27,15 @@ session_start (); /* Logged in? Simple security check */ if (!isset($_SESSION['ui'])){ gosa_log ("Error: getfax.php called without session"); - header ("Location: ../index.php"); + header ("Location: index.php"); exit; } $ui= $_SESSION["ui"]; /* User object present? */ -if (!isset($_SESSION['userfilter'])){ +if (!isset($_SESSION['fuserfilter'])){ gosa_log ("Error: getfax.php called without propper session data"); - header ("Location: ../index.php"); + header ("Location: index.php"); exit; } @@ -59,7 +59,7 @@ mysql_select_db("gofax") or die(_("Could not select database!")); $query = "SELECT id,uid FROM faxlog WHERE id = '".validate(stripcslashes($_GET['id']))."'"; $result = mysql_query($query) or die(_("Database query failed!")); $line = mysql_fetch_array($result, MYSQL_ASSOC); -if (!preg_match ("/'".$line["uid"]."'/", $_SESSION['userfilter'])){ +if (!preg_match ("/'".$line["uid"]."'/", $_SESSION['fuserfilter'])){ die ("No permissions to view fax!"); }