vignesh/dolibarr
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Doc

Browse source
This commit is contained in:
Laurent Destailleur 2025-11-09 19:19:49 +01:00
parent 9d15e4e08e
commit 9d70bcbf24
1 changed files with 8 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
htdocs/viewimage.php
View file

@ -61,32 +61,32 @@ $needlogin = 1;
if (isset($_GET["modulepart"])) {
// Some value of modulepart can be used to get resources that are public so no login are required.
// For logo of company
// For logo of company (by definition, the company logo is public)
if ($_GET["modulepart"] == 'mycompany' && preg_match('/^\/?logos\//', $_GET['file'])) {
$needlogin = 0;
}
// For barcode live generation
// For barcode live generation (barcode are just a graph of a value, so can be public)
if ($_GET["modulepart"] == 'barcode') {
$needlogin = 0;
}
// Medias files
// Medias files (by definition medias files are for website so are public)
if ($_GET["modulepart"] == 'medias') {
$needlogin = 0;
}
// Common files (files into /public/theme/common)
// Common files (public files embedded into /public/theme/common)
if ($_GET["modulepart"] == 'common') {
$needlogin = 0;
}
// User photo when user has made its profile public (for virtual credi card)
// User photo when user has made its profile public (for virtual credit card)
if ($_GET["modulepart"] == 'userphotopublic') {
$needlogin = 0;
}
// Used by TakePOS Auto Order
if ($_GET["modulepart"] == 'product' && isset($_GET["publictakepos"])) {
// Used by TakePOS Auto Order. TODO Image product may became public in this case. A security check to check that product is in takepos tree must be done later.
if ($_GET["modulepart"] == 'product' && isModEnabled('takepos') && isset($_GET["publictakepos"])) {
$needlogin = 0;
}
}
// For direct external download link, we don't need to load/check we are into a login session
// For direct external download link (when files was shared for download using a hash link), we don't need to load/check we are into a login session
if (isset($_GET["hashp"])) {
$needlogin = 0;
}