[Phpbb-checkins] CVS: phpBB2/includes topic_review.php,1.3,1.4

[Paul S. O. <ps...@us...>]

Update of /cvsroot/phpbb/phpBB2/includes
In directory usw-pr-cvs1:/tmp/cvs-serv20434/includes

Modified Files:
	topic_review.php 
Log Message:
Non-authed user could potentially utilise topic_review to read denied forums .... thanks Ashe

Index: topic_review.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/includes/topic_review.php,v
retrieving revision 1.3
retrieving revision 1.4
diff -C2 -r1.3 -r1.4
*** topic_review.php	18 Mar 2002 23:53:12 -0000	1.3
--- topic_review.php	18 Mar 2002 23:56:36 -0000	1.4
***************
*** 67,70 ****
--- 67,75 ----
  		$is_auth = array();
  		$is_auth = auth(AUTH_ALL, $forum_id, $userdata, $forum_row);
+ 
+ 		if ( !$is_auth['auth_read'] )
+ 		{
+ 			message_die(GENERAL_MESSAGE, sprintf($lang['Sorry_auth_read'], $is_auth['auth_read_type']));
+ 		}
  	}