security update

This commit is contained in:
Shadow
2014-02-13 08:05:11 +02:00
parent c8b348e283
commit 80c8d93edf
46 changed files with 94 additions and 48 deletions
+2 -1
View File
@@ -11,7 +11,8 @@
include_once("../../GameEngine/Account.php");
mysql_connect(SQL_SERVER, SQL_USER, SQL_PASS);
mysql_select_db(SQL_DB);
if ($session->access < ADMIN) die("Access Denied: You are not Admin!");
if (!isset($_SESSION)) session_start();
if($_SESSION['access'] < ADMIN) die("Access Denied: You are not Admin!");
$uid = $_POST['uid'];
$topic = $_POST['topic'];