blackicedbear/FHC-Core
1
0
Fork 0
mirror of https://github.com/FH-Complete/FHC-Core.git synced 2026-07-20 00:12:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Sicherheitslücke in Gruppenverwaltung behoben, Hintergrundfarbe für JS-Tree entfernt

Browse Source
This commit is contained in:
Andreas Österreicher
2013-11-08 13:15:20 +00:00
parent 3a56234c33
commit fcf1335f26
5 changed files with 30 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/js/jstree/themes/default/style.css
+2 -2
View File
@@ -17,7 +17,7 @@
.jstree-default a .jstree-icon { background-position:-56px -19px; }
.jstree-default a.jstree-loading .jstree-icon { background:url("throbber.gif") center center no-repeat !important; }
.jstree-default.jstree-focused { background:#ffffee; }
/*.jstree-default.jstree-focused { background:#ffffee; }*/
.jstree-default .jstree-no-dots li,
.jstree-default .jstree-no-dots .jstree-leaf > ins { background:transparent; }
@@ -71,4 +71,4 @@
.jstree-default .jstree-undetermined a .jstree-checkbox { _background-position:-20px -19px; }
.jstree-default .jstree-checked a .jstree-checkbox { _background-position:-38px -19px; }
.jstree-default .jstree-unchecked a .jstree-checkbox { _background-position:-2px -19px; }
/* IE6 END */
/* IE6 END */
include/lehrverband.class.php
+17 -7
View File
@@ -73,7 +73,7 @@ class lehrverband extends basis_db
}
else
{
$this->errormsg = 'Fehler bei Abfrage: '.$qry;
$this->errormsg = 'Fehler bei Abfrage';
return false;
}
}
@@ -199,9 +199,13 @@ class lehrverband extends basis_db
}
}
public function getSemesterFromStudiengang($studiengang_kz, $where)
public function getSemesterFromStudiengang($studiengang_kz, $aktiv=false)
{
$qry = 'SELECT semester, aktiv FROM public.tbl_lehrverband WHERE studiengang_kz='.$this->db_add_param($studiengang_kz, FHC_INTEGER)." AND verband=' ' ".$where;
$qry = 'SELECT semester, aktiv FROM public.tbl_lehrverband WHERE studiengang_kz='.$this->db_add_param($studiengang_kz, FHC_INTEGER)." AND verband=' ' ";
if($aktiv)
$qry.= ' AND aktiv=true';
$qry .= ' GROUP BY semester, aktiv ORDER BY semester;';
if($this->db_query($qry))
@@ -223,9 +227,11 @@ class lehrverband extends basis_db
}
}
public function getVerbandFromSemester($studiengang_kz, $semester, $where)
public function getVerbandFromSemester($studiengang_kz, $semester, $aktiv=false)
{
$qry = 'SELECT verband, aktiv, bezeichnung FROM public.tbl_lehrverband WHERE studiengang_kz='.$this->db_add_param($studiengang_kz, FHC_INTEGER).' AND semester='.$this->db_add_param($semester, FHC_INTEGER)." AND gruppe=' ' ".$where;
$qry = 'SELECT verband, aktiv, bezeichnung FROM public.tbl_lehrverband WHERE studiengang_kz='.$this->db_add_param($studiengang_kz, FHC_INTEGER).' AND semester='.$this->db_add_param($semester, FHC_INTEGER)." AND gruppe=' ' ";
if($aktiv)
$qry.=' AND aktiv=true';
$qry .= ' GROUP BY verband, aktiv, bezeichnung ORDER BY verband;';
if($this->db_query($qry))
@@ -248,9 +254,13 @@ class lehrverband extends basis_db
}
}
public function getGruppeFromVerband($studiengang_kz, $semester, $verband, $where)
public function getGruppeFromVerband($studiengang_kz, $semester, $verband, $aktiv=false)
{
$qry = 'SELECT gruppe, bezeichnung, aktiv FROM public.tbl_lehrverband WHERE studiengang_kz='.$this->db_add_param($studiengang_kz, FHC_INTEGER).' AND semester='.$this->db_add_param($semester, FHC_INTEGER).' AND verband='.$this->db_add_param($verband, FHC_STRING).$where;
$qry = 'SELECT gruppe, bezeichnung, aktiv FROM public.tbl_lehrverband WHERE studiengang_kz='.$this->db_add_param($studiengang_kz, FHC_INTEGER).' AND semester='.$this->db_add_param($semester, FHC_INTEGER).' AND verband='.$this->db_add_param($verband, FHC_STRING);
if($aktiv)
{
$qry.=' AND aktiv=true';
}
$qry .= ' GROUP BY gruppe, bezeichnung, aktiv ORDER BY gruppe;';
if($this->db_query($qry))
{