Commit 1be006937c650df3dc1bac52b6af07433e086950

Authored by Kevin Fourie
1 parent 87fb3aff

KTS-1475

"Prevent anonymous from saving search parameters"
Verified and applied patch.

Reviewed By: Conrad



git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@6192 c91229c3-7414-0410-bfa2-8a42b809f60b
Showing 1 changed file with 5 additions and 0 deletions
search/booleanSearch.php
... ... @@ -112,6 +112,11 @@ class BooleanSearchDispatcher extends KTStandardDispatcher {
112 112 exit(0);
113 113 }
114 114  
  115 + if ($this->oUser->isAnonymous()) {
  116 + $this->errorRedirectTo('performSearch', _kt('Cannot save searches as anonymous user'), sprintf('boolean_search_id=%s', $sSearch));
  117 + exit(0);
  118 + }
  119 +
115 120 $datavars = $_SESSION['boolean_search'][$sSearch];
116 121 if (!is_array($datavars)) {
117 122 $datavars = unserialize($datavars);
... ...