X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=modules.php;h=72cd6943e0f2197d24ebd203a41ac0a52eebf8f9;hp=ed8a25842f2b2385f4a7ad9ec5fafd81778606f9;hb=e29553ed2308e373d899cc18c0a89a34d2a1c754;hpb=b80ee4c24c8786ed4098d9e3526fe78da0e73c0b diff --git a/modules.php b/modules.php index ed8a25842f..72cd6943e0 100644 --- a/modules.php +++ b/modules.php @@ -44,12 +44,15 @@ $CSS = 0; $GLOBALS['what'] = ""; $GLOBALS['action'] = ""; $GLOBALS['userid'] = 0; +// Fix missing module to "index" +if (empty($_GET['module'])) $_GET['module'] = "index"; + +// Secure action/what if present if (!empty($_GET['action'])) $GLOBALS['action'] = secureString($_GET['action']); if (!empty($_GET['what'])) $GLOBALS['what'] = secureString($_GET['what']); -if (empty($_GET['module'])) $_GET['module'] = "index"; // Secure the module name (very important line!) -$GLOBALS['module'] = htmlentities(strip_tags($_GET['module']), ENT_QUOTES); +$GLOBALS['module'] = secureString($_GET['module']); // Needed include files require ("inc/config.php"); @@ -64,10 +67,12 @@ if (IS_MEMBER()) { list($s, $f) = SQL_FETCHROW($result); $username = $s." ".$f; - // Update only cookies and no login data! - UPDATE_LOGIN_DATA(false); + // Additionally admin? + if (IS_ADMIN()) { + // Add it + $username .= " ("._ADMIN_SHORT.")"; + } // END - if } else { - // Hmmm, logged in and no valid cookies??? $username = ""._UNKNOWN.""; }