* fix for safe.

2019-02-21 14:20:43 +08:00
parent 2fe7444d26
commit 8460f65864
1 changed files with 13 additions and 0 deletions
@@ -102,6 +102,19 @@ class tutorial extends control
        define('TUTORIAL',      true);
        define('WIZARD_MODULE', $module);
        define('WIZARD_METHOD', $method);
+
+        /* Check priv for tutorial. */
+        $hasPriv = false;
+        foreach($this->lang->tutorial->tasks as $taskName)
+        {
+            $taskModule = strtolower($taskName['nav']['module']);
+            if($taskModule == strtolower($module)) $hasPriv = true;
+            if(isset($this->lang->menugroup->$taskModule) and $this->lang->menugroup->$taskModule == strtolower($module)) $hasPriv = true;
+            if($hasPriv) break;
+        }
+        if(!$hasPriv and $module == 'my' and $method == 'index') $hasPriv = true;
+        if(!$hasPriv) die(js::locate('back'));
+
        $params = helper::safe64Decode($params);
        if($_POST)
        {