diff options
| author | Jakub Senko <jakubsenko@gmail.com> | 2018-09-28 12:55:45 +0200 |
|---|---|---|
| committer | Jakub Senko <jakubsenko@gmail.com> | 2018-09-28 12:55:45 +0200 |
| commit | f657ee51f89fcc0561155069c00957c46f31d96c (patch) | |
| tree | e6861b72852190cfc71b973c5fe0670459b56f17 /phpBB/includes | |
| parent | 001f32da95d4f8697ccc9a6107afc8dc68cbe48e (diff) | |
| download | forums-f657ee51f89fcc0561155069c00957c46f31d96c.tar forums-f657ee51f89fcc0561155069c00957c46f31d96c.tar.gz forums-f657ee51f89fcc0561155069c00957c46f31d96c.tar.bz2 forums-f657ee51f89fcc0561155069c00957c46f31d96c.tar.xz forums-f657ee51f89fcc0561155069c00957c46f31d96c.zip | |
[ticket/15593] Do not allow print view with direct URL
PHPBB3-15593
Diffstat (limited to 'phpBB/includes')
| -rw-r--r-- | phpBB/includes/ucp/ucp_pm.php | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/phpBB/includes/ucp/ucp_pm.php b/phpBB/includes/ucp/ucp_pm.php index d145d66f59..fa374c15c8 100644 --- a/phpBB/includes/ucp/ucp_pm.php +++ b/phpBB/includes/ucp/ucp_pm.php @@ -170,6 +170,12 @@ class ucp_pm trigger_error('NO_AUTH_READ_MESSAGE'); } + if ($view == 'print' && (!$config['print_pm'] || !$auth->acl_get('u_pm_printpm'))) + { + send_status_line(403, 'Forbidden'); + trigger_error('NO_AUTH_PRINT_MESSAGE'); + } + // Do not allow hold messages to be seen if ($folder_id == PRIVMSGS_HOLD_BOX) { |