Re: [psa-users] Drive Include Path Problem on new pages

[Albert L. <al...@pl...>]

Wow Peter good find, we'll update that. I see that Justin is already on it.
Cool. Glad to see you're testing the CVS too, have you tried the password
reset - we just added that. Its not elegant but is safe and quick. We're
looking to make a new release of the CVS code so if you find anything else
let us know. 


 
> You do not have access rights to this content.
> page X
> Go to Page Y
> 
> Obviously the fact that "page X" and "Go to Page Y" are shown is undesireable.
> Browser source code indicates that "page X" and "Go to Page Y" are after the
> closing </html> tag.
> 
> Stepping through _restrict.php shows that on the viewing denied page, the
> securityHeader() and  securityFooter() are called, and are output as part of
> $PSA_OUTPUT.
> 
> Then the remainder of the echo statements on pageX are called.
> 
> My tentative reaction is that it looks as if _restrict.php is missing an
> exit() call after the last call of securityFooter().
> 
> However, I also don't think that I understand how the output buffering
> functions work with respect to my code.   If my code needs to start getting
> included in the buffering, with a test for whether the user has viewing
> privileges, then I think I need to add more to each page (or function) than
> just including the _restrict.php page. If so, this should be documented a bit
> more for slow learners like me.  Or am I missing something else?
> 
> Peter
> 
> 
>