diff options
Diffstat (limited to 'httemplate/misc/process/payment.cgi')
| -rw-r--r-- | httemplate/misc/process/payment.cgi | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/httemplate/misc/process/payment.cgi b/httemplate/misc/process/payment.cgi index 889670d12..2baca1e39 100644 --- a/httemplate/misc/process/payment.cgi +++ b/httemplate/misc/process/payment.cgi @@ -15,6 +15,9 @@ % } <%init> +die "access denied" + unless $FS::CurrentUser::CurrentUser->access_right('Process payment'); + #some false laziness w/MyAccount::process_payment $cgi->param('custnum') =~ /^(\d+)$/ |