WindyMadman/dzzoffice
1
0
Fork 0
mirror of https://github.com/zyx0814/dzzoffice.git synced 2025-04-04 22:33:37 +08:00
Code Issues Packages Projects Releases Wiki Activity

修复默认模板下普通用户使用文件管理和分享管理可以查看所有数据问题 (#286)

Browse Source
This commit is contained in:
小胡 2025-02-12 18:15:37 +08:00 committed by GitHub
parent a3ed155c90
commit a46642b723
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
9 changed files with 25 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
core/class/helper/helper_browser.php
View File

@ -172,8 +172,6 @@ class helper_browser
} elseif (preg_match("/Mac/i", $agent) && preg_match("/Macintosh/i", $agent)) {
$os = array('Macintosh' => true);
}
return $os;
}
}

2
core/class/table/table_syscache.php
View File

@ -83,7 +83,7 @@ class table_syscache extends dzz_table
return $data;
}
public function insert($cachename, $data) {
public function insert($cachename, $data= false, $replace = false, $silent = false) {
parent::insert(array(
'cname' => $cachename,
'ctype' => is_array($data) ? 1 : 0,

10
dzz/filemanage/index.php
View File

@ -286,8 +286,14 @@ if ($do == 'delete') {
}
}
$limitsql = 'limit ' . $start . ',' . $perpage;
if ($count = DB::result_first("SELECT COUNT(*) FROM " . DB::table('resources') . " WHERE $sql", $param)) {
$data = DB::fetch_all("SELECT rid FROM " . DB::table('resources') . " WHERE $sql $order $limitsql", $param);
if ($_G['adminid']) {
$whereClause = $sql;
} else {
$whereClause = "uid = $uid AND $sql";
}
$count = DB::result_first("SELECT COUNT(*) FROM " . DB::table('resources') . " WHERE $whereClause", $param);
if ($count) {
$data = DB::fetch_all("SELECT rid FROM " . DB::table('resources') . " WHERE $whereClause $order $limitsql", $param);
$multi = multi($count, $perpage, $page, $theurl);
}
$list = array();

2
dzz/function/function_appperm.php
View File

@ -17,9 +17,9 @@ if (CURMODULE) {
global $global_appinfo;
$global_appinfo = $appinfo;
if ($_G['adminid']) return;
if (!$appinfo['available']) showmessage($appinfo['appname'].' 应用已关闭，请联系管理员。');
if ($appinfo['group'] == 0) return;
if ($_G['uid']) {
if (!$appinfo['available']) showmessage($appinfo['appname'].' 应用已关闭，请联系管理员。');
if ($appinfo['group'] == -1) showmessage($appinfo['appname'].' 应用仅限游客访问，请联系管理员。');
if ($appinfo['group'] == 3) showmessage($appinfo['appname'].' 应用仅限管理员访问，请联系管理员。');
$apps = C::t('app_market')->fetch_all_by_default($_G['uid'],true);

13
dzz/share/index.php
View File

@ -96,6 +96,7 @@ if ($do == 'getinfo') {
$username = trim($_GET['username']);
$asc = isset($_GET['asc']) ? intval($_GET['asc']) : 1;
$uid = intval($_GET['uid']);
$uid1=$_G['uid'];
$order = in_array($_GET['order'], array('title', 'dateline', 'type', 'size', 'count')) ? trim($_GET['order']) : 'dateline';
$gets = array('mod' => 'share', 'type' => $type, 'keyword' => $keyword, 'order' => $order, 'asc' => $asc, 'uid' => $uid, 'username' => $username);
$theurl = BASESCRIPT . "?" . url_implode($gets);
@ -123,8 +124,16 @@ if ($do == 'getinfo') {
$param[] = $uid;
}
$list = array();
if ($count = DB::result_first("SELECT COUNT(*) FROM %t WHERE $sql", $param)) {
$list = DB::fetch_all("SELECT * FROM %t WHERE $sql $orderby limit $start,$limit", $param);
if ($_G['adminid']) {
if ($count = DB::result_first("SELECT COUNT(*) FROM %t WHERE $sql", $param)) {
$list = DB::fetch_all("SELECT * FROM %t WHERE $sql $orderby limit $start,$limit", $param);
}
}else{
if ($count = DB::result_first("SELECT COUNT(*) FROM %t WHERE uid =$uid1 and $sql", $param)) {
$list = DB::fetch_all("SELECT * FROM %t WHERE uid =$uid1 and $sql $orderby limit $start,$limit", $param);
}
}
if ($count) {
foreach ($list as $k=> $value) {
$value['sharelink'] = C::t('shorturl')->getShortUrl(getglobal('siteurl').'index.php?mod=shares&sid='.dzzencode($value['id']));
if ($value['dateline'])

2
dzz/template/lyear/lyear_header_left.htm
View File

@ -1,5 +1,5 @@
<div id="logo" class="sidebar-header">
<a class="text-white text-truncate lead" href="{$_G[siteurl]}">
<a class="text-white text-truncate lead" href="{$_G[siteurl]}" title="">
<img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
<!--{if $global_appinfo['appname']}-->$global_appinfo['appname']<!--{else}-->{lang appname}<!--{/if}-->
</a>

2
user/login/template/lyear/login_single1.htm
View File

@ -14,7 +14,7 @@
<div class="card card-shadowed p-5 mb-0 mr-2 ml-2" style="width: 420px;">
<div class="card-body text-center">
<div class="text-center mb-3">
<img alt="light year admin" src="<!--{if $_G['setting']['bbclosed']}-->static/image/common/logo.png<!--{else}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{/if}-->">
<img src="<!--{if $_G['setting']['bbclosed']}-->static/image/common/logo.png<!--{else}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{/if}-->">
</div>
<!--{if $_G[setting][loginset][title]}-->
<h2 class="main-title">$_G[setting][loginset][title]</h2>

2
user/login/template/lyear/login_single2.htm
View File

@ -43,7 +43,7 @@
<!--{/if}-->
<div class="signin-box p-5 mb-0 mr-2 ml-2 rounded-5">
<div class="text-center mb-3">
<img alt="light year admin" src="<!--{if $_G['setting']['bbclosed']}-->static/image/common/logo.png<!--{else}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{/if}-->">
<img src="<!--{if $_G['setting']['bbclosed']}-->static/image/common/logo.png<!--{else}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{/if}-->">
<!--{if $_G[setting][loginset][title]}-->
<h2 class="main-title">$_G[setting][loginset][title]</h2>
<!--{/if}-->

2
user/login/template/lyear/login_single3.htm
View File

@ -14,7 +14,7 @@
<div class="col-md-6 col-lg-5 col-xl-4 align-self-center">
<div class="p-5">
<div class="text-center">
<img alt="light year admin" src="<!--{if $_G['setting']['bbclosed']}-->static/image/common/logo.png<!--{else}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{/if}-->">
<img src="<!--{if $_G['setting']['bbclosed']}-->static/image/common/logo.png<!--{else}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{/if}-->">
<!--{if $_G[setting][loginset][title]}-->
<h2 class="main-title">$_G[setting][loginset][title]</h2>
<!--{/if}-->