nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-08-21 17:06:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Ensure that mkcalendar will fail at / or /username/ locations.

Browse Source
This commit is contained in:
Andrew McMillan 2007-11-24 23:39:56 +13:00
parent b66460a34d
commit 522852d4f5
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
inc/CalDAVRequest.php
View File

@ -529,9 +529,14 @@ class CalDAVRequest
break;
case 'create':
return isset($this->permissions['write']) || isset($this->permissions['bind']);
break;
case 'mkcalendar':
case 'mkcol':
return isset($this->permissions['write']) || isset($this->permissions['bind']);
if ( !isset($this->permissions['write']) || !isset($this->permissions['bind']) ) return false;
if ( $this->is_principal ) return false;
if ( $this->path == '/' ) return false;
break;
case 'read':