[Commits] r646 - trunk/webinterface/mods/user/control

[new-commit at lists.openvcp.org]

Author: cryptronic
Date: 2009-01-01 18:57:20 +0000 (Thu, 01 Jan 2009)
New Revision: 646

Modified:
   trunk/webinterface/mods/user/control/main.php
Log:
Reinstall wasn't possible anymore. Bug fixed


Modified: trunk/webinterface/mods/user/control/main.php
===================================================================
--- trunk/webinterface/mods/user/control/main.php	2008-12-30 01:48:31 UTC (rev 645)
+++ trunk/webinterface/mods/user/control/main.php	2009-01-01 18:57:20 UTC (rev 646)
@@ -25,7 +25,7 @@
 $GUI    =& OpenVCP::call('GUI' , 'getReference');
 $XML    =& OpenVCP::call('XML', 'getReference');
 $SOCKET =& OpenVCP::call('Socket', 'getReference');
-$DB		=& OpenVCP::call('DB'  , 'getReference');
+$DB	=& OpenVCP::call('DB'  , 'getReference');
 $LOG    =& OpenVCP::call('Log', 'getReference');
 $PARAMS =& OpenVCP::getParams();
 $USERINFO = $AUTH->user_information;
@@ -170,6 +170,9 @@
 }
 else if($PARAMS[0] != "" && $PARAMS[1] == "rescue")
 {
+        if($AUTH->getPrivileges('can_reset') != 'y')
+	        OpenVCP::gotoURL("user/denied/can_restart");
+
 	if($vserver->isDisabled()) {
 		$GUI->p(_("sorry this vserver is disabled"));
 		exit();
@@ -285,8 +288,9 @@
 	}
 
 	foreach($osDD as $key=>$value) $osDDn[htmlentities($key)] = htmlentities($value);
-	$osDD = $osDDn;
+	$osDD = array_flip($osDDn);
 
+	$_POST['image'] = htmlentities($_POST['image']);
 
 	if($PARAMS[2] == "submit" && $vserver != null && isset($_POST['submit']) && in_array($_POST['image'], $osDD) && md5($_POST['currentuserpass']) == $USERINFO['password'])
 	{