BUG-14986 Authorization Bypass via Forceful Browsing IMPROVEMENT
This commit is contained in:
@@ -1,4 +1,6 @@
|
|||||||
<?php
|
<?php
|
||||||
|
global $RBAC;
|
||||||
|
$RBAC->requirePermissions( 'PM_USERS' );
|
||||||
|
|
||||||
//calculating the max upload file size;
|
//calculating the max upload file size;
|
||||||
$POST_MAX_SIZE = ini_get( 'post_max_size' );
|
$POST_MAX_SIZE = ini_get( 'post_max_size' );
|
||||||
|
|||||||
Reference in New Issue
Block a user