[FIX] RevCMS, Enter Client without acount.

Hey ragezone, this isnt actually a release i geuss but oh well, it seems like a release, so yeah,
it can be verry annoying if people can enter the client when their not even logged in, here's a small fix, most of you already have fixed this i geuss but still i've seen many hotel's facing this problem, im not a really good coder so the script might can do better, and your CMS maby already have this fixed in some way,
well atleast here's my fix, this is basicly for RevCMS.

Put this in top of ur CLIENT.php in ur skin.

Code:

---

<?php
if(!$_SESSION)
{
header('Location: http://yourdomain.com/index');
exit('Dont even try bepassing this.');
}
?>

---

If you know anny improvement feel free to use that :)

EDIT:
Thx Noman

Just add: case "client": in class.core

http://secretup.com/uploads/clientfixnoman.png?img=16

Leave a like:thumbup:

They would still be able to "enter the client" after adding your script. You might want to add exit; after the redirect, otherwise you can easily bypass the header.

Quote:

---

Originally Posted by iRaged

They would still be able to "enter the client" after adding your script. You might want to add exit; after the redirect, otherwise you can easily bypass the header.

---

Ah, i see thankyou i'll update it right now

OFFTOPIC:
I just noticed ur hotel doesnt have error message's when you login with wrong details, it might be handy for you to fix that, else it could confuse your users :)

Or may just use this :P

Code:

---

<?php if(isset($template->form->error)) {
echo $template->form->error;
}
?>

---

Or you could just edit the class.core.php in app folder.

http://puu.sh/9arks/c2c5a47f1a.png

Just add

Code:

---


                                        case "client":

---

Quote:

---

Originally Posted by Noman

Or you could just edit the class.core.php in app folder.

Just add

Code:

---


                    case "client":

---

---

:lol:I cant believe i didnt tink of that, oh well, thankyou, ill update the post.

For every problem there is a solution. This case, there are multiple fixes, the dirty one and the nicest one like Noman pointed out.

Quote:

---

Originally Posted by The General

Call exit() instead of die().

---

I already did the edit, (just class.core)

But yeah id also edit that just for sure

Also, die() and exit() does exsactly the same ting.