projects
/
Pman.Core
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
3dfa28e
)
permit access to mailing list message images
author
Alan Knowles
<alan@roojs.com>
Mon, 23 Dec 2019 03:19:41 +0000
(11:19 +0800)
committer
Alan Knowles
<alan@roojs.com>
Mon, 23 Dec 2019 03:19:41 +0000
(11:19 +0800)
Images.php
patch
|
blob
|
history
MessagePreview.php
patch
|
blob
|
history
diff --git
a/Images.php
b/Images.php
index
1d075c9
..
bfda282
100644
(file)
--- a/
Images.php
+++ b/
Images.php
@@
-42,7
+42,9
@@
class Pman_Core_Images extends Pman
{
// tables that do not need authentication checks before serving.
- var $public_image_tables = array();
+ var $public_image_tables = array(
+ 'crm_mailing_list_message' // we know these are ok...
+ );
var $sizes = array(
'100',
diff --git
a/MessagePreview.php
b/MessagePreview.php
index
f59cde1
..
e12a031
100644
(file)
--- a/
MessagePreview.php
+++ b/
MessagePreview.php
@@
-20,6
+20,7
@@
class Pman_Core_MessagePreview extends Pman
function get($v, $opts=array())
{
+
if(empty($_REQUEST['_id']) || empty($_REQUEST['_table'])){
$this->jerr('Missing Options');
}