Example #1
0
    }
    $vars = $vars2;
    $QUERY_STRING = harden_parse($QUERY_STRING);
}
if ($page == "shop/flypage" and !$product_id) {
    $page = "shop/browse";
}
unset($vars2);
/* end fixing security hole */
// Get Function Permissions
// Sets $run_func if func is registered and have permission
// Displays error if function is not registered
if ($func) {
    $func_list = $ps_function->get_function($func);
    if ($func_list) {
        if ($perm->check($func_list["perms"])) {
            $run_func = 1;
            $func_perms = $func_list["perms"];
            $func_class = $func_list["class"];
            $func_method = $func_list["method"];
        } else {
            $error_type = "Insufficient Access Rights";
            $error = "You do not have permission to execute {$func}.";
            $page = ERRORPAGE;
            $run_func = 0;
        }
    } else {
        $error_type = "Function Not Registered";
        $error = "{$func} is not a valid phpShop function.";
        $page = ERRORPAGE;
        $run_func = 0;
        echo $VM_LANG->_('PHPSHOP_PARAMETER_SEARCH');
        ?>
        </a>
<?php 
    }
    /** Changed Product Type - End */
    ?>
        <hr />
    </td>
  </tr>
  <!-- End Search Box --> 
<?php 
}
$perm = new ps_perm();
// Show the Frontend ADMINISTRATION Link
if ($perm->check("admin,storeadmin") && (!stristr($my->usertype, "admin") ^ PSHOP_ALLOW_FRONTENDADMIN_FOR_NOBACKENDERS == '' || stristr($my->usertype, "admin")) && $show_adminlink == 'yes') {
    ?>
    <tr> 
      <td colspan="2">
      	<a class="<?php 
    echo $class_mainlevel;
    ?>
" href="<?php 
    $sess->purl(SECUREURL . "index2.php?page=store.index&pshop_mode=admin");
    ?>
">
      	<?php 
    echo $VM_LANG->_('PHPSHOP_ADMIN_MOD');
    ?>
      	</a>
      </td>
Example #3
0
* to the GNU General Public License, and as distributed it includes or
* is derivative of works licensed under the GNU General Public License or
* other free or open source software licenses.
* See /administrator/components/com_virtuemart/COPYRIGHT.php for copyright notices and details.
*
* http://virtuemart.net
*/
while (@ob_end_clean()) {
}
header('Content-Type: application/x-javascript');
$mod = array();
$q = "SELECT module_name,module_perms from #__{vm}_module WHERE module_publish='Y' ";
$q .= "AND module_name <> 'checkout' ORDER BY list_order ASC";
$db->query($q);
while ($db->next_record()) {
    if (ps_perm::check($db->f("module_perms"))) {
        $mod[] = $db->f("module_name");
    }
}
$menu_items = assembleMenuItems($mod);
include ADMINPATH . 'version.php';
echo "\r\nif( typeof Ext == \"undefined\" ) {\r\n\tdocument.location=\"index2.php?option=" . VM_COMPONENT_NAME . "&vmLayout=standard&usefetchscript=0\";\r\n}\r\n// Check if this Window is a duplicate and opens in an iframe\r\nif( parent.vmLayout ) {\r\n\tif( typeof parent.vmLayout.loadPage == \"function\" ) {\r\n\t\t// then load the pure page, not again the whole VirtueMart Admin interface\r\n\t\tparent.vmLayout.loadPage();\r\n\t}\r\n}\r\nfunction classClicked(e, target) {\r\n    alert( 'klick!');\r\n\tif (target.target!='_top' && target.target!='_blank') {\r\n\t\te.stopEvent();\r\n        Ext.getCmp('west-panel').showPanel('vmPage');\r\n        loadPage(target.href );\r\n\t}\r\n}\r\nfunction showButtonMenu( btn, e ) {\r\n\tbtn.showMenu();\r\n}\r\nfunction hideButtonMenu( btn, e ) {\r\n\tbtn.hideMenu();\r\n}";
echo '
function vmLayoutInit() {	    
    try{ Ext.get("header-box").hide(); } catch(e) {} // Hide the Admin Menu under Joomla! 1.5
    try{ Ext.get("wrapper").hide(); } catch(e) {} // Hide the Admin Menu under Joomla! 1.0
            
    // initialize state manager, we will use cookies
	Ext.state.Manager.setProvider(new Ext.state.CookieProvider());
	';
$html = 'var toolbarItems = [';