aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/functions_privmsgs.php
diff options
context:
space:
mode:
authorChris Smith <toonarmy@phpbb.com>2009-12-11 22:27:00 +0000
committerChris Smith <toonarmy@phpbb.com>2009-12-11 22:27:00 +0000
commitf150bb82819349d2bea5b8bd042e078acbe424d9 (patch)
treebade0120e28f4c505e44b8d140baede9ea441418 /phpBB/includes/functions_privmsgs.php
parentc9b343b2c842d3301ce82bf837f004b3afe7e089 (diff)
downloadforums-f150bb82819349d2bea5b8bd042e078acbe424d9.tar
forums-f150bb82819349d2bea5b8bd042e078acbe424d9.tar.gz
forums-f150bb82819349d2bea5b8bd042e078acbe424d9.tar.bz2
forums-f150bb82819349d2bea5b8bd042e078acbe424d9.tar.xz
forums-f150bb82819349d2bea5b8bd042e078acbe424d9.zip
Do not permit unauthorised users to delete private messages from folder listing. #54355
git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10322 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB/includes/functions_privmsgs.php')
-rw-r--r--phpBB/includes/functions_privmsgs.php7
1 files changed, 7 insertions, 0 deletions
diff --git a/phpBB/includes/functions_privmsgs.php b/phpBB/includes/functions_privmsgs.php
index c93b6a6bba..4fc5034f7b 100644
--- a/phpBB/includes/functions_privmsgs.php
+++ b/phpBB/includes/functions_privmsgs.php
@@ -894,6 +894,13 @@ function handle_mark_actions($user_id, $mark_action)
case 'delete_marked':
+ global $auth;
+
+ if (!$auth->acl_get('u_pm_delete'))
+ {
+ trigger_error('NO_AUTH_DELETE_MESSAGE');
+ }
+
if (confirm_box(true))
{
delete_pm($user_id, $msg_ids, $cur_folder_id);