Index: trunk/kernel/action.php =================================================================== diff -u -r168 -r177 --- trunk/kernel/action.php (.../action.php) (revision 168) +++ trunk/kernel/action.php (.../action.php) (revision 177) @@ -744,7 +744,7 @@ $objEditData->SetTable('live'); break; case "m_customfield_edit": - + if($ro_perm) break; $DataType = $_POST["DataType"]; $FieldId = $_POST["CustomFieldId"]; $FieldName = $_POST["fieldname"]; @@ -759,7 +759,7 @@ unset($objCustomFields); break; case "m_customfield_add": - + if($ro_perm) break; $DataType = $_POST["DataType"]; $FieldName = $_POST["fieldname"]; //$FieldLabel = $_POST["fieldlabel"]; @@ -773,6 +773,7 @@ } break; case "m_customfield_delete": + if($ro_perm) break; $DataType = $_POST["DataType"]; $objCustomFields = new clsCustomFieldList($DataType); @@ -785,6 +786,7 @@ unset($objCustomFields); break; case "m_SearchConfig_Edit": + if($ro_perm) break; $SimpleValues = $_POST["simple"]; $AdvValues = $_POST["advanced"]; $module = $_POST["module"]; @@ -824,6 +826,7 @@ } break; case "m_keyword_reset": + if($ro_perm) break; $objSearchList = new clsSearchLogList(); foreach($_POST["itemlist"] as $k) { @@ -1193,6 +1196,7 @@ break; case "m_lang_delete": + if($ro_perm) break; if (isset($_POST["itemlist"])) { $Phrases = new clsPhraseList(); @@ -1339,6 +1343,7 @@ die(); break; case "m_emailevent_user": + if($ro_perm) break; $objEvents = new clsEventList(); //phpinfo(INFO_VARIABLES); //$objEvents->SourceTable = $objSession->GetEditTable("Events"); @@ -1387,6 +1392,7 @@ break; case "m_config_edit": //phpinfo(INFO_VARIABLES); + if($ro_perm) break; $objAdmin = new clsConfigAdmin(); $objAdmin->module = $_POST["module"]; $objAdmin->section = $_POST["section"]; @@ -1863,8 +1869,7 @@ } break; case "m_session_delete": - //if(isset($_POST["itemlist"])) - //{ + if($ro_perm) break; $ado = GetADODBConnection(); if (count($_POST['itemlist']) > 0) { foreach($_POST["itemlist"] as $id) @@ -1877,7 +1882,6 @@ $sql = "DELETE FROM ".GetTablePrefix()."UserSession WHERE Status='0'"; $ado->Execute($sql); } - //} break; case "m_add_rule": $objEditItems = new clsBanRuleList();