cvs: php-gtk-web /include shared-manual.inc /manual admin-notes.php

[email protected] ("Colin Viebrock") Thu, 09 Aug 2001 20:25:59 -0000
Newsgroups php.gtk
Message-ID <cvscmv997388759@cvsserver>
cmv		Thu Aug  9 16:25:59 2001 EDT

  Modified files:              
    /php-gtk-web/include	shared-manual.inc 
    /php-gtk-web/manual	admin-notes.php 
  Log:
  
  
Index: php-gtk-web/include/shared-manual.inc
diff -u php-gtk-web/include/shared-manual.inc:1.14 php-gtk-web/include/shared-manual.inc:1.15
--- php-gtk-web/include/shared-manual.inc:1.14	Thu Aug  9 16:07:49 2001
+++ php-gtk-web/include/shared-manual.inc	Thu Aug  9 16:25:58 2001
@@ -185,8 +185,7 @@
 	if (isset($MAGIC_COOKIE) && $id) {
 
 		print_link('/manual/admin-notes.php?action=edit+' . $id . '&brief=1',
-			make_image('notes-edit.gif', 'edit note'),
-			'admin'
+			make_image('notes-edit.gif', 'edit note')
 		);
 		echo '&nbsp';
 		print_link('/manual/admin-notes.php?action=reject+' . $id . '&brief=1&popup=1',
Index: php-gtk-web/manual/admin-notes.php
diff -u php-gtk-web/manual/admin-notes.php:1.9 php-gtk-web/manual/admin-notes.php:1.10
--- php-gtk-web/manual/admin-notes.php:1.9	Thu Aug  9 16:19:22 2001
+++ php-gtk-web/manual/admin-notes.php	Thu Aug  9 16:25:59 2001
@@ -32,14 +32,14 @@
 
 if ($action != '') {
 
-	if (!verify_password($user,$pass)) {
+	list ($action, $id) = explode(' ', $action);
+
+	if ($action!='edit' && !verify_password($user,$pass)) {
 		echo "<P><B>Authorization failed.</P>";
 		commonFooter();
 		exit;
 	}
 
-	list ($action, $id) = explode(' ', $action);
-
 	switch($action) {
 	case 'delete':
 		$query = 'SELECT *,UNIX_TIMESTAMP(ts) AS xwhen FROM note WHERE id='.$id;
@@ -98,6 +98,8 @@
 		break;
 
 	case 'edit':
+		echo "<P>Only people with " . make_link('http://www.php.net/cvs-php.php', 'CVS accounts') . 
+			" are able to edit the manual notes, so please don't email us asking when this doesn't work for you.</P>";
 		$query = 'SELECT *,UNIX_TIMESTAMP(ts) AS xwhen FROM note WHERE id='.$id;
 		if ($result = mysql_query($query)) {
 			$row = mysql_fetch_array($result);