[svn r12701] Fix security breach http://projects.dokeos.com/?do=details&id=1758

main/user/subscribe_class.php

@@ -36,10 +36,10 @@
 $language_file = array('registration','admin');
 include ('../inc/global.inc.php');
 $this_section = SECTION_COURSES;
-api_protect_course_script();
+if (!api_is_allowed_to_edit()) api_not_allowed(true);
 if(api_get_setting('use_session_mode')=='true')
 {
-	api_not_allowed();
+	api_not_allowed(true);
 }
 
 require_once (api_get_path(LIBRARY_PATH).'course.lib.php');

main/user/subscribe_user.php

@@ -42,7 +42,7 @@
 $language_file = 'registration';
 include ("../inc/global.inc.php");
 $this_section = SECTION_COURSES;
-
+if (!api_is_allowed_to_edit()) api_not_allowed(true);
 require_once (api_get_path(LIBRARY_PATH).'course.lib.php');
 require_once (api_get_path(LIBRARY_PATH).'sortabletable.class.php');
 require_once (api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php');