X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;f=modules%2Fxnet.php;h=195d4bb450b9f3df211c0a37cedd0315637c67f3;hb=a0b453227e9433d2bd4dea1e07a7463800702839;hp=b1dd12b54bd2fccc33cc891179ded9c3b56cdb7d;hpb=03849c3e86daed5b647984298ca9d8f55c3b1e35;p=platal.git diff --git a/modules/xnet.php b/modules/xnet.php index b1dd12b..195d4bb 100644 --- a/modules/xnet.php +++ b/modules/xnet.php @@ -1,6 +1,6 @@ stopSUID(); + Platal::session()->destroy(); $page->changeTpl('xnet/deconnexion.tpl'); } @@ -80,43 +80,43 @@ class XnetModule extends PLModule Get::v('del')); list($id, $nom, $domain) = $res->fetchOneRow(); $page->assign('nom', $nom); - if ($id && Post::has('del') && S::has_xsrf_token()) { + if ($id && Post::has('del')) { + S::assert_xsrf_token(); + XDB::query('DELETE FROM groupex.membres WHERE asso_id={?}', $id); - $page->trig('membres supprimés'); + $page->trigSuccess('membres supprimés'); if ($domain) { XDB::query('DELETE FROM virtual_domains WHERE domain={?}', $domain); XDB::query('DELETE FROM virtual, virtual_redirect USING virtual INNER JOIN virtual_redirect USING (vid) WHERE alias LIKE {?}', '%@'.$domain); - $page->trig('suppression des alias mails'); + $page->trigSuccess('suppression des alias mails'); $mmlist = new MMList(S::v('uid'), S::v('password'), $domain); if ($listes = $mmlist->get_lists()) { foreach ($listes as $l) { $mmlist->delete_list($l['list'], true); } - $page->trig('mail lists surpprimées'); + $page->trigSuccess('mail lists surpprimées'); } } XDB::query('DELETE FROM groupex.asso WHERE id={?}', $id); - $page->trig("Groupe $nom supprimé"); + $page->trigSuccess("Groupe $nom supprimé"); Get::kill('del'); - } else if ($id && Post::has('del')) { - $page->trig("La suppression du groupe X a échouée, merci de réssayer."); } if (!$id) { Get::kill('del'); } } - if (Post::has('diminutif') && S::has_xsrf_token()) { + if (Post::has('diminutif')) { + S::assert_xsrf_token(); + XDB::query('INSERT INTO groupex.asso (id,diminutif) VALUES(NULL,{?})', Post::v('diminutif')); pl_redirect('../'.Post::v('diminutif').'/edit'); - } else if (Post::has('diminutif')) { - $page->trig("L'ajout du groupe X a échoué, merci de réssayer."); } $res = XDB::query('SELECT nom,diminutif FROM groupex.asso ORDER by NOM');