X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;f=modules%2Fmarketing.php;h=ac5cff5fbb35a3a28f7a6e300197bb2609b4b37b;hb=2e04c41b702b2ff21bc0bd9cee5fe119eb863950;hp=33f131a34f9735429cc9d25c37ccdef9dda37ec9;hpb=cbdcd130c8e5189a62587da35f37ea51eddf64b5;p=platal.git diff --git a/modules/marketing.php b/modules/marketing.php index 33f131a..ac5cff5 100644 --- a/modules/marketing.php +++ b/modules/marketing.php @@ -24,15 +24,15 @@ class MarketingModule extends PLModule function handlers() { return array( - 'marketing' => $this->make_hook('marketing', AUTH_MDP, 'admin'), - 'marketing/promo' => $this->make_hook('promo', AUTH_MDP, 'admin'), - 'marketing/relance' => $this->make_hook('relance', AUTH_MDP, 'admin'), - 'marketing/this_week' => $this->make_hook('week', AUTH_MDP, 'admin'), - 'marketing/volontaire' => $this->make_hook('volontaire', AUTH_MDP, 'admin'), - - 'marketing/private' => $this->make_hook('private', AUTH_MDP, 'admin'), - 'marketing/public' => $this->make_hook('public', AUTH_COOKIE), - 'marketing/broken' => $this->make_hook('broken', AUTH_COOKIE), + 'marketing' => $this->make_hook('marketing', AUTH_PASSWD, 'admin'), + 'marketing/promo' => $this->make_hook('promo', AUTH_PASSWD, 'admin'), + 'marketing/relance' => $this->make_hook('relance', AUTH_PASSWD, 'admin'), + 'marketing/this_week' => $this->make_hook('week', AUTH_PASSWD, 'admin'), + 'marketing/volontaire' => $this->make_hook('volontaire', AUTH_PASSWD, 'admin'), + + 'marketing/private' => $this->make_hook('private', AUTH_PASSWD, 'admin'), + 'marketing/public' => $this->make_hook('public', AUTH_COOKIE, 'user'), + 'marketing/broken' => $this->make_hook('broken', AUTH_COOKIE, 'user'), ); } @@ -237,7 +237,7 @@ class MarketingModule extends PLModule if (Post::has('mail')) { $email = valide_email(Post::v('mail')); } - if (Post::has('valide') && isvalid_email_redirection($email)) { + if (Post::has('valide') && isvalid_email_redirection($email, $user)) { S::assert_xsrf_token(); // security stuff @@ -303,7 +303,7 @@ class MarketingModule extends PLModule $email = trim(Post::v('mail')); require_once 'emails.inc.php'; - if (!isvalid_email_redirection($email)) { + if (!isvalid_email_redirection($email, $user)) { $page->trigError('Email invalide !'); } else { // On cherche les marketings précédents sur cette adresse