From: Nicolas Boisselier <nicolas.boisselier@gmail.com>
Date: Thu, 11 Jan 2018 02:36:30 +0000 (+0000)
Subject: www/dbq/dbq.php
X-Git-Url: https://git.nbdom.net/?a=commitdiff_plain;h=5ed9d4ca147527661165a9daa3a7fab4df6f0072;p=nb.git

www/dbq/dbq.php
---

diff --git a/www/dbq/dbq.php b/www/dbq/dbq.php
index 87fc363a..9925966b 100644
--- a/www/dbq/dbq.php
+++ b/www/dbq/dbq.php
@@ -1171,14 +1171,17 @@ EOF;
 			$this->page($this->db,'status');
 
 		} elseif ($action == 'databases') {
+ 			$this->deniedUnless($this->perm >= self::ADMIN);
 			$this->page($this->db,'databases');
 
 		} elseif ($action == 'csv') {
+ 			$this->deniedUnless($this->perm >= self::ADMIN);
 			header('Content-type: text/plain');
 			$this->db->dump2csv();
 			exit;
 
 		} elseif ($action == 'dump') {
+ 			$this->deniedUnless($this->perm >= self::ADMIN);
 			header('Content-type: text/plain');
 			$this->db->dump($this->params['action']);
 			exit;