mirror of
https://github.com/ACSPRI/queXS
synced 2024-04-02 12:12:16 +00:00
142 lines
6.7 KiB
PHP
142 lines
6.7 KiB
PHP
<?php
|
|
/*
|
|
* LimeSurvey
|
|
* Copyright (C) 2007 The LimeSurvey Project Team / Carsten Schmitz
|
|
* All rights reserved.
|
|
* License: GNU/GPL License v2 or later, see LICENSE.php
|
|
* LimeSurvey is free software. This version may have been modified pursuant
|
|
* to the GNU General Public License, and as distributed it includes or
|
|
* is derivative of works licensed under the GNU General Public License or
|
|
* other free or open source software licenses.
|
|
* See COPYRIGHT.php for copyright notices and details.
|
|
*
|
|
* $Id: access_denied.php 4247 2008-02-16 00:24:07Z lemeur $
|
|
*/
|
|
|
|
|
|
if (!isset($dbprefix) || isset($_REQUEST['dbprefix'])) {die("Cannot run this script directly (access_denied)");}
|
|
|
|
if (isset($_SESSION['loginID']))
|
|
{
|
|
|
|
$accesssummary = "<br /><strong>".$clang->gT("Access denied!")."</strong><br />\n";
|
|
|
|
$action=returnglobal('action');
|
|
if ( $action == "dumpdb" )
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed dump the database!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "dumplabel")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed export a label set!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "edituser")
|
|
{
|
|
$accesssummary .= $clang->gT("You are not allowed to change user data!");
|
|
$accesssummary .= "<br /><br /><a href='$scriptname?action=editusers'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "newsurvey")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to create new surveys!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "deletesurvey")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to delete this survey!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "addquestion")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to add new questions for this survey!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "activate")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to activate this survey!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "deactivate")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to deactivate this survey!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "addgroup")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to add a group to this survey!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "ordergroups")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to order groups in this survey!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "editsurvey")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to edit this survey!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "editgroup")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to edit groups in this survey!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "browse_response" || $action == "listcolumn" || $action == "vvexport" || $action == "vvimport")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to browse responses!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "assessment")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to set assessment rules!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "delusergroup")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to delete this group!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?action=editusergroups'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "importsurvey")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to import a survey!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
|
|
elseif($action == "importgroup")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to import a group!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "importquestion")
|
|
{
|
|
$accesssummary .= "<p>".$clang->gT("You are not allowed to to import a question!")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "CSRFwarn")
|
|
{
|
|
$accesssummary .= "<p><font color='red'>".$clang->gT("Security Alert")."</font>: ".$clang->gT("Someone may be trying to use your LimeSurvey session (CSRF attack suspected). If you just clicked on a malicious link, please report this to your system administrator.")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
elseif($action == "FakeGET")
|
|
{
|
|
$accesssummary .= "<p><font color='red'>".$clang->gT("Security Alert")."</font>: ".$clang->gT("Someone may be trying to use your LimeSurvey session by using dangerous GET requests (CSRF attack suspected). If you just clicked on a malicious link, please report this to your system administrator.")."</p>";
|
|
$accesssummary .= "<a href='$scriptname?sid={$sid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
else
|
|
{
|
|
$accesssummary .= "<br />".$clang->gT("You are not allowed to perform this operation!")."<br />\n";
|
|
if(!empty($sid))
|
|
$accesssummary .= "<br /><br /><a href='$scriptname?sid=$sid>".$clang->gT("Continue")."</a><br /> \n";
|
|
elseif(!empty($ugid))
|
|
//elseif(isset($_GET['ugid']))
|
|
{
|
|
$accesssummary .= "<br /><br /><a href='$scriptname?action=editusergroups&ugid={$ugid}'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
else
|
|
$accesssummary .= "<br /><br /><a href='$scriptname'>".$clang->gT("Continue")."</a><br /> \n";
|
|
}
|
|
|
|
}
|
|
?>
|