diff options
Diffstat (limited to 'mayor-orig/mayor-portal/www/policy')
| -rw-r--r-- | mayor-orig/mayor-portal/www/policy/parent/portal/portal/portal_demo.classic.php | 4 | ||||
| -rw-r--r-- | mayor-orig/mayor-portal/www/policy/private/portal/hirek/egyhir-pre.php | 2 |
2 files changed, 4 insertions, 2 deletions
diff --git a/mayor-orig/mayor-portal/www/policy/parent/portal/portal/portal_demo.classic.php b/mayor-orig/mayor-portal/www/policy/parent/portal/portal/portal_demo.classic.php index c48052fd..8e8949fc 100644 --- a/mayor-orig/mayor-portal/www/policy/parent/portal/portal/portal_demo.classic.php +++ b/mayor-orig/mayor-portal/www/policy/parent/portal/portal/portal_demo.classic.php @@ -31,10 +31,10 @@ echo '</td>'; echo '<td class="jobb">'; - echo '<script type="text/javascript">includeCSS(\'/skin/ajax/module-naplo/css/tanev/orarend.css\')</script>'; + echo '<script type="text/javascript">includeCSS(\'/skin/ajax/module-naplo/css/orarend/orarend.css\')</script>'; $_refStamp = mktime(date('H')+8,0,0,date('m'), date('d'), date('Y')); $dt = date('Y-m-d', $_refStamp); - putDoboz('Órarend '.str_replace('-','.',$dt).'.',ajaxUpdaterForm('orarend','index.php?page=naplo&sub=tanev&f=orarend',array('dt' => $dt),'post',true) + putDoboz('Órarend '.str_replace('-','.',$dt).'.',ajaxUpdaterForm('orarend','index.php?page=naplo&sub=orarend&f=orarend',array('dt' => $dt),'post',true) ,array('header-color'=>'#f06')); // putDoboz('Hangya',ajaxUpdaterForm('hangya','index.php?page=naplo&sub=hibabejelento&f=admin',array(),'post',true), diff --git a/mayor-orig/mayor-portal/www/policy/private/portal/hirek/egyhir-pre.php b/mayor-orig/mayor-portal/www/policy/private/portal/hirek/egyhir-pre.php index f5931b9d..6addac83 100644 --- a/mayor-orig/mayor-portal/www/policy/private/portal/hirek/egyhir-pre.php +++ b/mayor-orig/mayor-portal/www/policy/private/portal/hirek/egyhir-pre.php @@ -6,6 +6,8 @@ if (_RIGHTS_OK !== true) die(); $hirId = readVariable($_POST['hirId'],'id',null); if ($hirId=='') $hirId = readVariable($_GET['hirId'],'id',null); $action = readVariable($_POST['action'],'strictstring',array(null,'save','')); + if ($hirId>0 && isOwner($hirId)===false) $_SESSION['alert'][] = 'page:not_owner'; + if ($action=='save' && (__HIREKADMIN || $hirId=='' || isOwner($hirId))) { global $LANGUAGES; if (__HIREKADMIN === true) { |