fix permissions check to xml package files and show only menus user has access to

1 files changed, 5 insertions, 13 deletions

diff --git a/etc/inc/priv.inc b/etc/inc/priv.inc
index ec941d2..c100a23 100644
--- a/etc/inc/priv.inc
+++ b/etc/inc/priv.inc
@@ -119,15 +119,10 @@ function cmp_page_matches($page, & $matches, $fullwc = true) {
 			continue;
 
 		/* compare exact or wildcard match */
-		$wcpos = strpos($match, "*");
-		if ($wcpos === false)
-			$result = strcmp($page, $match);
-		else {
-			$match = "/" . str_replace(array(".", "*"), array("\.", ".*"), $match) . "/";
-			$result = !preg_match($match, $page);
-		}
-
-		if (!$result)
+		$match =  str_replace(array(".", "*","?"), array("\.", ".*","\?"), $match);
+		$result = preg_match("@^/{$match}$@", "/{$page}");
+		
+		if ($result)
 			return true;
 	}
 
@@ -222,10 +217,7 @@ function isAllowedPage($page) {
 				return true;
 
 	/* user privelege access check */
-	if (cmp_page_matches($page, $_SESSION['page-match']))
-		return true;
-
-	return false;
+	return cmp_page_matches($page, $_SESSION['page-match']);
 }
 
 function getPrivPages(& $entry, & $allowed_pages) {