aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/viewtopic.php
diff options
context:
space:
mode:
authorMarc Alexander <admin@m-a-styles.de>2018-10-27 23:48:53 +0200
committerMarc Alexander <admin@m-a-styles.de>2018-10-27 23:48:53 +0200
commit20393592d7c58a548853015cfbf489ea964f3c0f (patch)
tree4541703c5714f3843b83f4a84f1836b49c0c6ded /phpBB/viewtopic.php
parent0cded66ff2833da9afaf06b1418d9b9322a890fa (diff)
parentf657ee51f89fcc0561155069c00957c46f31d96c (diff)
downloadforums-20393592d7c58a548853015cfbf489ea964f3c0f.tar
forums-20393592d7c58a548853015cfbf489ea964f3c0f.tar.gz
forums-20393592d7c58a548853015cfbf489ea964f3c0f.tar.bz2
forums-20393592d7c58a548853015cfbf489ea964f3c0f.tar.xz
forums-20393592d7c58a548853015cfbf489ea964f3c0f.zip
Merge pull request #5387 from senky/ticket/15593
[ticket/15593] Do not allow print view with direct URL
Diffstat (limited to 'phpBB/viewtopic.php')
-rw-r--r--phpBB/viewtopic.php6
1 files changed, 6 insertions, 0 deletions
diff --git a/phpBB/viewtopic.php b/phpBB/viewtopic.php
index 55b41aa7fa..0cbb5284c7 100644
--- a/phpBB/viewtopic.php
+++ b/phpBB/viewtopic.php
@@ -342,6 +342,12 @@ if (($topic_data['topic_type'] != POST_NORMAL) && $topic_data['topic_time_limit'
// Setup look and feel
$user->setup('viewtopic', $topic_data['forum_style']);
+if ($view == 'print' && !$auth->acl_get('f_print', $forum_id))
+{
+ send_status_line(403, 'Forbidden');
+ trigger_error('NO_AUTH_PRINT_TOPIC');
+}
+
$overrides_f_read_check = false;
$overrides_forum_password_check = false;
$topic_tracking_info = isset($topic_tracking_info) ? $topic_tracking_info : null;