fernando/luos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

BUG-FILES Upload files templates IMPROVEMENT

Browse Source 
Al subir los templates no se valida el tipo.

Se agrego la validacion del PRO_UID, ademas de tener el permiso PM_FACTORY y se quita cualquier tipo de codigo que no sea html en los archivos processes_doUpload.php, processes_Ajax.php, processes_Upload
This commit is contained in:
Marco Antonio Nina
2013-12-19 15:55:17 -04:00
parent f2a223a6a0
commit ba8368fb00
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
workflow/engine/methods/processes/processes_doUpload.php
View File

@@ -7,7 +7,9 @@ if ( $RBAC->userCanAccess('PM_FACTORY') == 1) {
G::LoadClass('processes'); G::LoadClass('processes');
$app = new Processes(); $app = new Processes();
if (!$app->processExists($form['PRO_UID'])) { if (!$app->processExists($form['PRO_UID'])) {
echo G::LoadTranslation('ID_PROCESS_UID_NOT_DEFINED'); $result = 0;
$msg = G::LoadTranslation('ID_PROCESS_UID_NOT_DEFINED');
echo "{'result': $result, 'msg':'$msg'}";
die; die;
} }
switch ($form['MAIN_DIRECTORY']) { switch ($form['MAIN_DIRECTORY']) {