Changeset 23670

Timestamp:

2014/10/28 17:02:31 (8 years ago)

Author:

shinichi_takahashi

Message:

#2645 管理者権限のアクセス制限が効いていない　の修正

File:

• branches/version-2_13_3/data/class/SC_Session.php (modified) (1 diff)

branches/version-2_13_3/data/class/SC_Session.php

@@ -71 +71 @@
             $masterData = new SC_DB_MasterData_Ex();
             $admin_path = strtolower(preg_replace('/\/+/', '/', $_SERVER['SCRIPT_NAME']));            
+            $admin_path = preg_replace('/' . preg_quote(ROOT_URLPATH, '/') . '/', '/', $admin_path);
+            $admin_path = preg_replace('/' . preg_quote(ADMIN_DIR, '/') . '/', 'admin/', $admin_path);
             $arrPERMISSION = array_change_key_case($masterData->getMasterData('mtb_permission'));
             if (isset($arrPERMISSION[$admin_path])) {