migration to db_user to prevent sql injections

[iserv-mod-error-reporter.git] / src / detail.php

diff --git a/src/detail.php b/src/detail.php
index b091f8f..a0af8ac 100644 (file)
--- a/src/detail.php
+++ b/src/detail.php
@@ -30,6 +30,8 @@ require_once("mod_error-reporter/init.inc");
 require_once("sec/secure.inc");
 require_once("js.inc");
 
 require_once("sec/secure.inc");
 require_once("js.inc");
 

+db_user("errorreporter");
+

 PageBlue(_c("error-reporter:Change an error report"), "mod_error-reporter");
 
 if(!$cfgErrors->userHasAccess()) {
 PageBlue(_c("error-reporter:Change an error report"), "mod_error-reporter");
 
 if(!$cfgErrors->userHasAccess()) {


@@ -65,7 +67,6 @@ $er = $doc->getErrorReportByID($getUid);
 $strOldComment = $er->getComment();
 
 // Probably we have to update an error report
 $strOldComment = $er->getComment();
 
 // Probably we have to update an error report

-echo "PostSubmit: $postSubmit";

 if($getAction == "update" and $postSubmit == _("Change"))
 {
   if($cfgErrors->userIsAdmin()) {
 if($getAction == "update" and $postSubmit == _("Change"))
 {
   if($cfgErrors->userIsAdmin()) {