[SPIP] ~v3.2.4-->v3.2.5

[lhc/web/www.git] / www / ecrire / inc / securiser_action.php

diff --git a/www/ecrire/inc/securiser_action.php b/www/ecrire/inc/securiser_action.php
index 6d7a9c8..52e8ff1 100644 (file)
--- a/www/ecrire/inc/securiser_action.php
+++ b/www/ecrire/inc/securiser_action.php
@@ -184,14 +184,16 @@ function caracteriser_auteur($id_auteur = null) {
 function _action_auteur($action, $id_auteur, $pass, $alea) {
        static $sha = array();
        if (!isset($sha[$id_auteur . $pass . $alea])) {
-               if (!isset($GLOBALS['meta'][$alea]) and _request('exec') !== 'install') {
-                       include_spip('inc/acces');
-                       charger_aleas();
-                       if (empty($GLOBALS['meta'][$alea])) {
-                               include_spip('inc/minipres');
-                               echo minipres();
-                               spip_log("$alea indisponible");
-                               exit;
+               if (!isset($GLOBALS['meta'][$alea])) {
+                       if (!$exec = _request('exec') or !autoriser_sans_cookie($exec)){
+                               include_spip('inc/acces');
+                               charger_aleas();
+                               if (empty($GLOBALS['meta'][$alea])){
+                                       include_spip('inc/minipres');
+                                       echo minipres();
+                                       spip_log("$alea indisponible");
+                                       exit;
+                               }
                        }
                }
                include_spip('auth/sha256.inc');