permit access to mailing list message images
authorAlan Knowles <alan@roojs.com>
Mon, 23 Dec 2019 03:19:41 +0000 (11:19 +0800)
committerAlan Knowles <alan@roojs.com>
Mon, 23 Dec 2019 03:19:41 +0000 (11:19 +0800)
Images.php
MessagePreview.php

index 1d075c9..bfda282 100644 (file)
@@ -42,7 +42,9 @@ class Pman_Core_Images extends Pman
 {
     
     // tables that do not need authentication checks before serving.
-    var $public_image_tables = array();
+    var $public_image_tables = array(
+        'crm_mailing_list_message'   // we know these are ok...
+    );
     
     var  $sizes = array(
                 '100', 
index f59cde1..e12a031 100644 (file)
@@ -20,6 +20,7 @@ class Pman_Core_MessagePreview extends Pman
     
     function get($v, $opts=array())
     {
         if(empty($_REQUEST['_id']) || empty($_REQUEST['_table'])){
             $this->jerr('Missing Options');
         }