| Server IP : 49.231.201.246 / Your IP : 216.73.216.149 Web Server : Apache/2.4.18 (Ubuntu) System : Linux 246 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64 User : root ( 0) PHP Version : 7.0.33-0ubuntu0.16.04.16 Disable Function : exec,passthru,shell_exec,system,proc_open,popen,pcntl_exec MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/old/administrator/components/com_k2/helpers/ |
Upload File : |
<?php
/**
* @version 2.6.x
* @package K2
* @author JoomlaWorks http://www.joomlaworks.net
* @copyright Copyright (c) 2006 - 2014 JoomlaWorks Ltd. All rights reserved.
* @license GNU/GPL license: http://www.gnu.org/copyleft/gpl.html
*/
// no direct access
defined('_JEXEC') or die;
jimport('joomla.html.parameter');
class K2HelperPermissions
{
public static function checkPermissions()
{
// Set some variables
$mainframe = JFactory::getApplication();
$user = JFactory::getUser();
$option = JRequest::getCmd('option');
$view = JRequest::getCmd('view');
$task = JRequest::getCmd('task');
$id = JRequest::getInt('cid');
//Generic manage check
if (!$user->authorise('core.manage', $option))
{
JError::raiseWarning(404, JText::_('JERROR_ALERTNOAUTHOR'));
$mainframe->redirect('index.php');
}
// Determine action for rest checks
$action = false;
if ($mainframe->isAdmin() && $view != '' && $view != 'info')
{
switch($task)
{
case '' :
case 'save' :
case 'apply' :
if (!$id)
{
$action = 'core.create';
}
else
{
$action = 'core.edit';
}
break;
case 'trash' :
case 'remove' :
$action = 'core.delete';
break;
case 'publish' :
case 'unpublish' :
case 'featured':
$action = 'core.edit.state';
}
// Edit or Edit own action
if ($action == 'core.edit' && $view == 'item' && $id)
{
JTable::addIncludePath(JPATH_COMPONENT_ADMINISTRATOR.DS.'tables');
$item = JTable::getInstance('K2Item', 'Table');
$item->load($id);
if ($item->created_by == $user->id)
{
$action = 'core.edit.own';
}
}
// Check the determined action
if ($action)
{
if (!$user->authorise($action, $option))
{
JError::raiseWarning(404, JText::_('JERROR_ALERTNOAUTHOR'));
$mainframe->redirect('index.php?option=com_k2');
}
}
}
}
}