View Issue Detail

ID	Project	Category	Submitted / Last Updated
01866	UserSpice	ACP Code	2023-06-26 00:24:46 / 2024-03-18 08:32:10
Reported	Brandin Arsenault	Assigned To	Unassigned
Priority	normal	Reported	5.6.1
Status	closed	Resolution Version and Commit
Summary	updatePages code is not wrapped causing the Permission Manager to be non-functioning
Description	On line 19 of users/views/_admin_permissions.php, we begin using the add and remove fields but we did not wrap the code with the updatePages post check. Replace Line 19-44 with: if (!empty($_POST['updatePages'])) { $add = Input::get('add'); $remove = Input::get('remove'); if ($remove != '') { foreach ($remove as $r) { $db->query('DELETE FROM permission_page_matches WHERE page_id = ? AND permission_id = ?', [$r, $manage]); usSuccess("Page id $r removed from permission level $manage"); logger($user->data()->id, 'Permissions Manager', "Removed page id $r from permission level $manage"); } } if ($add != '') { foreach ($add as $r) { $fields = [ 'page_id' => $r, 'permission_id' => $manage, ]; $db->insert('permission_page_matches', $fields); usSuccess("Page id $r added to permission level $manage"); logger($user->data()->id, 'Permissions Manager', "Added page id $r to permission level $manage"); } } if ($add != '' \|\| $remove != '') { Redirect::to('admin.php?view=permissions&manage='.$manage); } }