fixed issue #982, LOAD with ajax=False and args
This commit is contained in:
@@ -2111,10 +2111,8 @@ class SQLFORM(FORM):
|
||||
# - url has valid signature (vars are not signed, only path_info)
|
||||
# = url does not contain 'create','delete','edit' (readonly)
|
||||
if user_signature:
|
||||
if not (
|
||||
'/'.join(str(a) for a in args) == '/'.join(request.args) or
|
||||
URL.verify(request, user_signature=user_signature,
|
||||
hash_vars=False) or
|
||||
if not ('/'.join(map(str,args)) == '/'.join(map(str,request.args)) or
|
||||
URL.verify(request, user_signature=user_signature, hash_vars=False) or
|
||||
(request.args(len(args)) == 'view' and not logged)):
|
||||
session.flash = T('not authorized')
|
||||
redirect(referrer)
|
||||
|
||||
Reference in New Issue
Block a user