Content management as it is meant to be
https://forum.cmsmadesimple.org/
no link if the user has no permission to edit templatesif(isset($templates[$one->TemplateId()]->name) && $templates[$one->TemplateId()]->name && check_permission($userid, 'Modify Templates'))
{
$thelist .= "TemplateId()."&from=content">".$templates[$one->TemplateId()]->name."\n";
}
elseif (isset($templates[$one->TemplateId()]->name) && $templates[$one->TemplateId()]->name)
{
$thelist .= "".$templates[$one->TemplateId()]->name."\n";
}
956: if (check_permission($userid, 'Modify Page Structure') || check_permission($userid, 'Modify Any Page') )if ($display == 'edit')
{
$thelist .= "Id()."">";
$thelist .= $editImg;
$thelist .= "\n";
}
else
{
$thelist .= ' ' . "\n";
}
if(check_permission($userid, 'Modify Page Structure') || check_permission($userid, 'Remove Pages'))
{
if ($one->DefaultContent() != true)
{
//if ($one->ChildCount() == 0 && !in_array($one->Id(),$openedArray))
//var_dump($one->ChildCount());
if ($root->getChildrenCount() == 0) /*persmission check moved to top*/
{
$thelist .= "Id()."" onclick="if (confirm('".lang('deleteconfirm', $one->mName)."')) xajax_content_delete(".$one->Id()."); return false;">";
$thelist .= $deleteImg;
$thelist .= "\n";
}
else
{
$thelist .= ' ' . "\n";
}
}
else
{
$thelist .= ' ' . "\n";
}
}
if(check_permission($userid, 'Modify Page Structure'))
{
if ($one->DefaultContent() != true)
{
$thelist .= 'Id().'" />' . "\n";
}
else
{
$thelist .= ' ' . "\n";
}
}
There must be a permission check to delete pages in the header as well (was missing before)if (check_permission($userid, 'Modify Page Structure'))
{
$headoflist .= " \n";
}
function selectall()
{
checkboxes = document.getElementsByTagName("input");
for (i=0; i<checkboxes.length ; i++)
{
if(checkboxes[ i ].type == "checkbox")
{
if(checkboxes[ i ].checked == false)
checkboxes[ i ].checked=true;
else
checkboxes[ i ].checked=false;
}
}
}