Backport (and some code cleaning)

git-svn-id: svn+ssh://murphy/home/svn/platal/trunk@1051 839d8a87-29fc-0310-9880-83ba4fa771e5

diff --git a/classes/platal.php b/classes/platal.php
index e8648ad..5cf0d75 100644 (file)
--- a/classes/platal.php
+++ b/classes/platal.php
@@ -98,6 +98,10 @@ class Platal
         $args    = $this->argv;
         $args[0] = &$page;
 
+        if (strlen($hook['perms']) && $hook['perms'] != Session::v('perms')) {
+            return PL_FORBIDDEN;
+        }
+
         if ($hook['auth'] > S::v('auth', AUTH_PUBLIC)) {
             if ($hook['type'] == DO_AUTH) {
                 global $globals;

diff --git a/modules/xnetevents.php b/modules/xnetevents.php
index 95d904d..15eaa7f 100644 (file)
--- a/modules/xnetevents.php
+++ b/modules/xnetevents.php
@@ -431,9 +431,7 @@ class XnetEventsModule extends PLModule
                                         VALUES ({?}, {?}, '', '', 0)", $eid, 1);
             }
 
-#            if (is_null($evt['eid'])) {
-                pl_redirect('events');
-#            }
+            pl_redirect('events');
         }
 
         // get a list of all the payment for this asso