plugins/SpecialPageFuncs.php
changeset 343 7e6537fd4730
parent 318 eec2dfd2f0a3
equal deleted inserted replaced
342:a78b0798a116 343:7e6537fd4730
    86     }
    86     }
    87     if ( $namespace == 'Special' || ( $namespace == 'System' && $session->user_level < USER_LEVEL_ADMIN ) || $namespace == 'Admin')
    87     if ( $namespace == 'Special' || ( $namespace == 'System' && $session->user_level < USER_LEVEL_ADMIN ) || $namespace == 'Admin')
    88     {
    88     {
    89       $template->header();
    89       $template->header();
    90       
    90       
    91       echo '<h3>The page could not be created.</h3><p>The name "'.$p.'" is invalid.</p>';
    91       echo '<h3>The page could not be created.</h3><p>The name "'.htmlspecialchars($p).'" is invalid.</p>';
    92       
    92       
    93       $template->footer();
    93       $template->footer();
    94       $db->close();
    94       $db->close();
    95       
    95       
    96       exit;
    96       exit;
   100     $namespace = $_POST['namespace'];
   100     $namespace = $_POST['namespace'];
   101     if ( $namespace == 'Special' || ( $namespace == 'System' && $session->user_level < USER_LEVEL_ADMIN ) || $namespace == 'Admin')
   101     if ( $namespace == 'Special' || ( $namespace == 'System' && $session->user_level < USER_LEVEL_ADMIN ) || $namespace == 'Admin')
   102     {
   102     {
   103       $template->header();
   103       $template->header();
   104       
   104       
   105       echo '<h3>The page could not be created.</h3><p>The name "'.$paths->nslist[$namespace].$p.'" is invalid.</p>';
   105       echo '<h3>The page could not be created.</h3><p>The name "'.$paths->nslist[$namespace].htmlspecialchars($p).'" is invalid.</p>';
   106       
   106       
   107       $template->footer();
   107       $template->footer();
   108       $db->close();
   108       $db->close();
   109       
   109       
   110       exit;
   110       exit;