diff options
| author | Dries Buytaert <dries@buytaert.net> | 2004-11-29 12:49:17 +0000 |
|---|---|---|
| committer | Dries Buytaert <dries@buytaert.net> | 2004-11-29 12:49:17 +0000 |
| commit | b83b34018f38006c7a099e8d6f9853a23ffc8633 (patch) | |
| tree | 6030eda57f271f62ae0cc46f92f6dc0f28bf686f | |
| parent | d8113fda7eb79ff4a5b5f7283974b66cf31db079 (diff) | |
| download | brdo-b83b34018f38006c7a099e8d6f9853a23ffc8633.tar.gz brdo-b83b34018f38006c7a099e8d6f9853a23ffc8633.tar.bz2 | |
- Patch #10697 by matteo: avoid that administrators can create nodes with the wrong node type.
| -rw-r--r-- | modules/node.module | 2 | ||||
| -rw-r--r-- | modules/node/node.module | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/modules/node.module b/modules/node.module index 5302b20fd..dc4e3638c 100644 --- a/modules/node.module +++ b/modules/node.module @@ -1271,7 +1271,7 @@ function node_add($type) { $edit = $_POST['edit']; // If a node type has been specified, validate its existence. - if ($type && node_access('create', $type)) { + if (in_array($type, node_list()) && node_access('create', $type)) { // Initialize settings: $node = array('uid' => $user->uid, 'name' => $user->name, 'type' => $type); diff --git a/modules/node/node.module b/modules/node/node.module index 5302b20fd..dc4e3638c 100644 --- a/modules/node/node.module +++ b/modules/node/node.module @@ -1271,7 +1271,7 @@ function node_add($type) { $edit = $_POST['edit']; // If a node type has been specified, validate its existence. - if ($type && node_access('create', $type)) { + if (in_array($type, node_list()) && node_access('create', $type)) { // Initialize settings: $node = array('uid' => $user->uid, 'name' => $user->name, 'type' => $type); |