X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fmarketing.php;h=a043020712640b11dbb9d6658def9df53324e1d8;hb=c68a9e6350b9efa9c2c4a56c065778a2b4efb711;hp=5086e9613e32af3d29de98d26f09038d0145866d;hpb=e5ceaa8c8943660e5995c68c22e6646e85613006;p=platal.git diff --git a/modules/marketing.php b/modules/marketing.php index 5086e96..a043020 100644 --- a/modules/marketing.php +++ b/modules/marketing.php @@ -1,6 +1,6 @@ $this->make_hook('marketing', AUTH_MDP, 'admin'), - 'marketing/promo' => $this->make_hook('promo', AUTH_MDP, 'admin'), - 'marketing/relance' => $this->make_hook('relance', AUTH_MDP, 'admin'), - 'marketing/this_week' => $this->make_hook('week', AUTH_MDP, 'admin'), - 'marketing/volontaire' => $this->make_hook('volontaire', AUTH_MDP, 'admin'), + 'marketing' => $this->make_hook('marketing', AUTH_PASSWD, 'admin'), + 'marketing/promo' => $this->make_hook('promo', AUTH_PASSWD, 'admin'), + 'marketing/relance' => $this->make_hook('relance', AUTH_PASSWD, 'admin'), + 'marketing/this_week' => $this->make_hook('week', AUTH_PASSWD, 'admin'), + 'marketing/volontaire' => $this->make_hook('volontaire', AUTH_PASSWD, 'admin'), - 'marketing/private' => $this->make_hook('private', AUTH_MDP, 'admin'), + 'marketing/private' => $this->make_hook('private', AUTH_PASSWD, 'admin'), 'marketing/public' => $this->make_hook('public', AUTH_COOKIE, 'user'), 'marketing/broken' => $this->make_hook('broken', AUTH_COOKIE, 'user'), ); @@ -237,7 +237,7 @@ class MarketingModule extends PLModule if (Post::has('mail')) { $email = valide_email(Post::v('mail')); } - if (Post::has('valide') && isvalid_email_redirection($email)) { + if (Post::has('valide') && isvalid_email_redirection($email, $user)) { S::assert_xsrf_token(); // security stuff @@ -303,7 +303,7 @@ class MarketingModule extends PLModule $email = trim(Post::v('mail')); require_once 'emails.inc.php'; - if (!isvalid_email_redirection($email)) { + if (!isvalid_email_redirection($email, $user)) { $page->trigError('Email invalide !'); } else { // On cherche les marketings précédents sur cette adresse