visit.php
submit.php
ratenews.php
print.php
makepdf.php
index.php
article.php
Below is the code from modules/news/index.php (lines 88-111 with _NOPERM in line 101)
$storytopic=0;
if(isset($_GET['storytopic'])) {
$storytopic=intval($_GET['storytopic']);
} else {
if(isset($_GET['topic_id'])) {
$storytopic=intval($_GET['topic_id']);
}
}
if ($storytopic) {
$groups = is_object($xoopsUser) ? $xoopsUser->getGroups() : XOOPS_GROUP_ANONYMOUS;
$gperm_handler =& xoops_gethandler('groupperm');
if (!$gperm_handler->checkRight('news_view', $storytopic, $groups, $xoopsModule->getVar('mid'))) {
redirect_header(XOOPS_URL.'/modules/news/index.php', 3, _NOPERM);
exit();
}
$xoopsOption['storytopic'] = $storytopic;
} else {
$xoopsOption['storytopic'] = 0;
}
if (isset($_GET['storynum'])) {
$xoopsOption['storynum'] = intval($_GET['storynum']);
if ($xoopsOption['storynum'] > 30) {
$xoopsOption['storynum'] = $xoopsModuleConfig['storyhome'];