diff options
author | Marc Alexander <admin@m-a-styles.de> | 2018-10-27 23:48:53 +0200 |
---|---|---|
committer | Marc Alexander <admin@m-a-styles.de> | 2018-10-27 23:48:53 +0200 |
commit | 20393592d7c58a548853015cfbf489ea964f3c0f (patch) | |
tree | 4541703c5714f3843b83f4a84f1836b49c0c6ded /phpBB/viewtopic.php | |
parent | 0cded66ff2833da9afaf06b1418d9b9322a890fa (diff) | |
parent | f657ee51f89fcc0561155069c00957c46f31d96c (diff) | |
download | forums-20393592d7c58a548853015cfbf489ea964f3c0f.tar forums-20393592d7c58a548853015cfbf489ea964f3c0f.tar.gz forums-20393592d7c58a548853015cfbf489ea964f3c0f.tar.bz2 forums-20393592d7c58a548853015cfbf489ea964f3c0f.tar.xz forums-20393592d7c58a548853015cfbf489ea964f3c0f.zip |
Merge pull request #5387 from senky/ticket/15593
[ticket/15593] Do not allow print view with direct URL
Diffstat (limited to 'phpBB/viewtopic.php')
-rw-r--r-- | phpBB/viewtopic.php | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/phpBB/viewtopic.php b/phpBB/viewtopic.php index 55b41aa7fa..0cbb5284c7 100644 --- a/phpBB/viewtopic.php +++ b/phpBB/viewtopic.php @@ -342,6 +342,12 @@ if (($topic_data['topic_type'] != POST_NORMAL) && $topic_data['topic_time_limit' // Setup look and feel $user->setup('viewtopic', $topic_data['forum_style']); +if ($view == 'print' && !$auth->acl_get('f_print', $forum_id)) +{ + send_status_line(403, 'Forbidden'); + trigger_error('NO_AUTH_PRINT_TOPIC'); +} + $overrides_f_read_check = false; $overrides_forum_password_check = false; $topic_tracking_info = isset($topic_tracking_info) ? $topic_tracking_info : null; |