torrentpier/torrentpier-lts
1
0
Fork 0
mirror of https://github.com/torrentpier/torrentpier-lts.git synced 2025-02-28 15:10:54 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

Added optional parament in $valid_actions [AJAX] (#91)

Browse Source 
torrentpier/torrentpier#567
This commit is contained in:
Roman Kelesidis 2023-04-01 00:44:50 +07:00 committed by GitHub
parent 770ca6d229
commit 5af4f7f113
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 23 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
ajax.php
View File

@ -12,19 +12,6 @@ $ajax->init();
// Init userdata // Init userdata
$user->session_start(); $user->session_start();
// Exit if board is disabled via ON/OFF trigger or by admin
if ($ajax->action != 'manage_admin')
{
if ($bb_cfg['board_disable'])
{
$ajax->ajax_die($lang['BOARD_DISABLE']);
}
else if (file_exists(BB_DISABLED))
{
$ajax->ajax_die($lang['BOARD_DISABLE_CRON']);
}
}
// Load actions required modules // Load actions required modules
switch ($ajax->action) switch ($ajax->action)
{ {
@ -73,6 +60,7 @@ switch ($ajax->action)
// Position in $ajax->valid_actions['xxx'] // Position in $ajax->valid_actions['xxx']
define('AJAX_AUTH', 0); // 'guest', 'user', 'mod', 'admin', 'super_admin' define('AJAX_AUTH', 0); // 'guest', 'user', 'mod', 'admin', 'super_admin'
define('AJAX_ALWAYS_ACTIVE', 1); // определяет скрипты, которые будут работать при отключенном форуме
$ajax->exec(); $ajax->exec();
@ -90,8 +78,8 @@ class ajax_common
'change_user_rank' => array('admin'), 'change_user_rank' => array('admin'),
'change_user_opt' => array('admin'), 'change_user_opt' => array('admin'),
'manage_user' => array('admin'), 'manage_user' => array('admin'),
'manage_admin' => array('admin'), 'manage_admin' => array('admin', true),
'sitemap' => array('admin'), 'sitemap' => array('admin', true),
'mod_action' => array('mod'), 'mod_action' => array('mod'),
'topic_tpl' => array('mod'), 'topic_tpl' => array('mod'),
@ -127,7 +115,7 @@ class ajax_common
*/ */
function exec() function exec()
{ {
global $lang; global $lang, $bb_cfg;
// Exit if we already have errors // Exit if we already have errors
if (!empty($this->response['error_code'])) if (!empty($this->response['error_code']))
@ -138,6 +126,9 @@ class ajax_common
// Check that requested action is valid // Check that requested action is valid
$action = $this->action; $action = $this->action;
// Action params
$action_params = null;
if (!$action || !is_string($action)) if (!$action || !is_string($action))
{ {
$this->ajax_die('no action specified'); $this->ajax_die('no action specified');
@ -147,6 +138,22 @@ class ajax_common
$this->ajax_die('invalid action: ' . $action); $this->ajax_die('invalid action: ' . $action);
} }
// Exit if board is disabled via ON/OFF trigger or by admin
if ($bb_cfg['board_disable'] || file_exists(BB_DISABLED))
{
if ($action_params[AJAX_ALWAYS_ACTIVE] !== true)
{
if ($bb_cfg['board_disable'])
{
$this->ajax_die($lang['BOARD_DISABLE']);
}
elseif (file_exists(BB_DISABLED))
{
$this->ajax_die($lang['BOARD_DISABLE_CRON']);
}
}
}
// Auth check // Auth check
switch ($action_params[AJAX_AUTH]) switch ($action_params[AJAX_AUTH])
{ {