Changeset 585 for trunk/Modules/News

Timestamp:

Sep 13, 2013, 9:26:31 PM (11 years ago)

Author:

chronos

Message:

• Added: Access to RSS channels restricted to higher level user with API token.

File:

• trunk/Modules/News/RSS.php (modified) (1 diff)

trunk/Modules/News/RSS.php

@@ -35 +35 @@
           $this->RawPage = true;
           
-          if(array_key_exists($_GET['channel'], $this->System->ModuleManager->Modules['News']->RSSChannels))
+          if(array_key_exists('channel', $_GET)) $ChannelName = $_GET['channel'];
+            else $ChannelName = '';
+          if(array_key_exists('token', $_GET)) $Token = $_GET['token'];
+            else $Token = '';
+          if(array_key_exists($ChannelName, $this->System->ModuleManager->Modules['News']->RSSChannels))
           {
-            $Channel = $this->System->ModuleManager->Modules['News']->RSSChannels[$_GET['channel']];
-            if($this->System->User->Licence($Channel['Permission']))
+            $Channel = $this->System->ModuleManager->Modules['News']->RSSChannels[$ChannelName];            
+            if($this->System->User->Licence($Channel['Permission']) or 
+            $this->System->User->CheckToken($Channel['Permission'], $Token))
             {
             if(is_string($Channel['Callback'][0]))