Update of /cvsroot/mantisbt/mantisbt/core
In directory sc8-pr-cvs16.sourceforge.net:/tmp/cvs-serv14713
Modified Files:
Tag: BRANCH_1_1_0
helper_api.php
Log Message:
Fixed #8461: signup_page and lost_pwd_page don't work if anonymous access not
enabled
Index: helper_api.php
===================================================================
RCS file: /cvsroot/mantisbt/mantisbt/core/helper_api.php,v
retrieving revision 1.75.2.1
retrieving revision 1.75.2.2
diff -u -d -r1.75.2.1 -r1.75.2.2
--- helper_api.php 13 Oct 2007 22:35:31 -0000 1.75.2.1
+++ helper_api.php 14 Oct 2007 19:00:08 -0000 1.75.2.2
@@ -415,6 +415,10 @@
# returns a boolean indicating whether SQL queries executed should be
shown
# or not.
function helper_show_queries() {
- return ON == config_get( 'show_queries_count' ) &&
access_has_global_level( config_get( 'show_queries_threshold' ) );
+ # Check is authenticated before checking access level,
otherwise user gets
+ # redirected to login_page.php. See #8461.
+ return ON == config_get( 'show_queries_count' ) &&
+ auth_is_user_authenticated() &&
+ access_has_global_level( config_get(
'show_queries_threshold' ) );
}
?>
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
|