X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;ds=inline;f=modules%2Fmarketing.php;h=ac5cff5fbb35a3a28f7a6e300197bb2609b4b37b;hb=8af607ead9a244d0e83c9312c2c8a946c696d0b6;hp=5086e9613e32af3d29de98d26f09038d0145866d;hpb=d89a495539357b3ad30f7b891bd23d1805355a52;p=platal.git diff --git a/modules/marketing.php b/modules/marketing.php index 5086e96..ac5cff5 100644 --- a/modules/marketing.php +++ b/modules/marketing.php @@ -24,13 +24,13 @@ class MarketingModule extends PLModule function handlers() { return array( - 'marketing' => $this->make_hook('marketing', AUTH_MDP, 'admin'), - 'marketing/promo' => $this->make_hook('promo', AUTH_MDP, 'admin'), - 'marketing/relance' => $this->make_hook('relance', AUTH_MDP, 'admin'), - 'marketing/this_week' => $this->make_hook('week', AUTH_MDP, 'admin'), - 'marketing/volontaire' => $this->make_hook('volontaire', AUTH_MDP, 'admin'), + 'marketing' => $this->make_hook('marketing', AUTH_PASSWD, 'admin'), + 'marketing/promo' => $this->make_hook('promo', AUTH_PASSWD, 'admin'), + 'marketing/relance' => $this->make_hook('relance', AUTH_PASSWD, 'admin'), + 'marketing/this_week' => $this->make_hook('week', AUTH_PASSWD, 'admin'), + 'marketing/volontaire' => $this->make_hook('volontaire', AUTH_PASSWD, 'admin'), - 'marketing/private' => $this->make_hook('private', AUTH_MDP, 'admin'), + 'marketing/private' => $this->make_hook('private', AUTH_PASSWD, 'admin'), 'marketing/public' => $this->make_hook('public', AUTH_COOKIE, 'user'), 'marketing/broken' => $this->make_hook('broken', AUTH_COOKIE, 'user'), ); @@ -237,7 +237,7 @@ class MarketingModule extends PLModule if (Post::has('mail')) { $email = valide_email(Post::v('mail')); } - if (Post::has('valide') && isvalid_email_redirection($email)) { + if (Post::has('valide') && isvalid_email_redirection($email, $user)) { S::assert_xsrf_token(); // security stuff @@ -303,7 +303,7 @@ class MarketingModule extends PLModule $email = trim(Post::v('mail')); require_once 'emails.inc.php'; - if (!isvalid_email_redirection($email)) { + if (!isvalid_email_redirection($email, $user)) { $page->trigError('Email invalide !'); } else { // On cherche les marketings précédents sur cette adresse