fernando/luos
1
0
Fork 0
Code Releases Activity

BUG-FILES Upload files templates IMPROVEMENT

Browse Source 
- Al subir los templates no se valida el tipo.

- Se agrego la validacion del PRO_UID, ademas de tener el permiso PM_FACTORY y se quita cualquier tipo de codigo que no sea html en los archivos processes_doUpload.php, processes_Ajax.php, processes_UploadFiles.php.
This commit is contained in:
Marco Antonio Nina
2013-12-19 15:08:07 -04:00
parent ec860a320d
commit f2a223a6a0
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
workflow/engine/methods/processes/processes_UploadFiles.php
View File

@@ -3,7 +3,7 @@ global $RBAC;
if ( $RBAC->userCanAccess('PM_FACTORY') == 1) { if ( $RBAC->userCanAccess('PM_FACTORY') == 1) {
G::LoadClass('processes'); G::LoadClass('processes');
$app = new Processes(); $app = new Processes();
if (!$app->processExists($_REQUEST['pro_uid'])) { if (!$app->processExists($_POST['form']['PRO_UID'])) {
echo G::LoadTranslation('ID_PROCESS_UID_NOT_DEFINED'); echo G::LoadTranslation('ID_PROCESS_UID_NOT_DEFINED');
die; die;
} }