summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorchris <chris@jalakai.co.uk>2006-06-06 10:32:12 +0200
committerchris <chris@jalakai.co.uk>2006-06-06 10:32:12 +0200
commitebd3d9ce41d93a81c337b861cbf4d2c2887a37fa (patch)
tree7e2ff552814ebddd340447b24d36fae69a84c863
parentb08cc288cd974538443619e7e29342ade31bfded (diff)
downloadrpg-ebd3d9ce41d93a81c337b861cbf4d2c2887a37fa.tar.gz
rpg-ebd3d9ce41d93a81c337b861cbf4d2c2887a37fa.tar.bz2
bug#775, fix access control of resend password page
darcs-hash:20060606083212-9b6ab-b04f08b3fde6baca7ec2a33a38c3f147651c8371.gz
-rw-r--r--inc/actions.php6
1 files changed, 6 insertions, 0 deletions
diff --git a/inc/actions.php b/inc/actions.php
index c195ecf26..e1576c179 100644
--- a/inc/actions.php
+++ b/inc/actions.php
@@ -199,6 +199,12 @@ function act_permcheck($act){
}else{
$permneed = AUTH_ADMIN;
}
+ }elseif($act == 'resendpwd'){
+ if ($conf['resendpasswd']) {
+ $permneed = AUTH_NONE;
+ }else{
+ $permneed = AUTH_ADMIN+1; // shouldn't get here if $conf['resendpasswd'] is off
+ }
}elseif($act == 'admin'){
$permneed = AUTH_ADMIN;
}else{