Merge branch 'master' of bitbucket.org:colosa/processmaker into BUG-10957
This commit is contained in:
@@ -249,7 +249,6 @@ try {
|
||||
$i = $i + 1;
|
||||
}
|
||||
}
|
||||
|
||||
if (count( $arrayField ) > 0) {
|
||||
for ($i = 0; $i <= count( $arrayField ) - 1; $i ++) {
|
||||
if ($arrayFileError[$i] == 0) {
|
||||
@@ -289,15 +288,15 @@ try {
|
||||
//Get the Custom Folder ID (create if necessary)
|
||||
$oFolder = new AppFolder();
|
||||
|
||||
//***Validating the file allowed extensions***
|
||||
$res = G::verifyInputDocExtension($aID['INP_DOC_TYPE_FILE'], $_FILES["form"]["name"]["input"], $_FILES["form"]["tmp_name"]["input"]);
|
||||
if($res->status == 0){
|
||||
$message = $res->message;
|
||||
G::SendMessageText( $message, "ERROR" );
|
||||
$backUrlObj = explode( "sys" . SYS_SYS, $_SERVER['HTTP_REFERER'] );
|
||||
G::header( "location: " . "/sys" . SYS_SYS . $backUrlObj[1] );
|
||||
die();
|
||||
}
|
||||
//***Validating the file allowed extensions***
|
||||
$res = G::verifyInputDocExtension($aID['INP_DOC_TYPE_FILE'], $arrayFileName[$i], $arrayFileTmpName[$i]);
|
||||
if($res->status == 0){
|
||||
$message = $res->message;
|
||||
G::SendMessageText( $message, "ERROR" );
|
||||
$backUrlObj = explode( "sys" . SYS_SYS, $_SERVER['HTTP_REFERER'] );
|
||||
G::header( "location: " . "/sys" . SYS_SYS . $backUrlObj[1] );
|
||||
die();
|
||||
}
|
||||
|
||||
//Validate Filesize of $_FILE
|
||||
$inpDocMaxFilesize = $aID["INP_DOC_MAX_FILESIZE"];
|
||||
|
||||
@@ -175,7 +175,11 @@ if (! (isset( $fields->Fields['XMLNODE_NAME'] ) && ($fields->Fields['XMLNODE_NAM
|
||||
}
|
||||
if ($tableExists) {
|
||||
$con = Propel::getConnection( $Fields['PME_SQLCONNECTION'] );
|
||||
$rs = $con->executeQuery( "SHOW COLUMNS FROM USERS" );
|
||||
if ($Fields['PME_SQLCONNECTION'] == 'rbac') {
|
||||
$rs = $con->executeQuery( "SHOW COLUMNS FROM RBAC_USERS" );
|
||||
} else {
|
||||
$rs = $con->executeQuery( "SHOW COLUMNS FROM USERS" );
|
||||
}
|
||||
$result = Array ();
|
||||
$i = 0;
|
||||
while ($rs->next()) {
|
||||
|
||||
@@ -102,12 +102,12 @@ try {
|
||||
if (PPP_FAILED_LOGINS > 0) {
|
||||
if ($_SESSION['FAILED_LOGINS'] >= PPP_FAILED_LOGINS) {
|
||||
$oConnection = Propel::getConnection('rbac');
|
||||
$oStatement = $oConnection->prepareStatement("SELECT USR_UID FROM USERS WHERE USR_USERNAME = '" . $usr . "'");
|
||||
$oStatement = $oConnection->prepareStatement("SELECT USR_UID FROM RBAC_USERS WHERE USR_USERNAME = '" . $usr . "'");
|
||||
$oDataset = $oStatement->executeQuery();
|
||||
if ($oDataset->next()) {
|
||||
$sUserUID = $oDataset->getString('USR_UID');
|
||||
$oConnection = Propel::getConnection('rbac');
|
||||
$oStatement = $oConnection->prepareStatement("UPDATE USERS SET USR_STATUS = 0 WHERE USR_UID = '" . $sUserUID . "'");
|
||||
$oStatement = $oConnection->prepareStatement("UPDATE RBAC_USERS SET USR_STATUS = 0 WHERE USR_UID = '" . $sUserUID . "'");
|
||||
$oStatement->executeQuery();
|
||||
$oConnection = Propel::getConnection('workflow');
|
||||
$oStatement = $oConnection->prepareStatement("UPDATE USERS SET USR_STATUS = 'INACTIVE' WHERE USR_UID = '" . $sUserUID . "'");
|
||||
|
||||
Reference in New Issue
Block a user