Beanz/flatpress
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

admin.php allowed to see intro panel to non-loggedin users! (not really harmful, it just looked as if it was)

Browse Source
This commit is contained in:
real_nowhereman 2008-02-10 14:11:44 +00:00
parent 64e3040cd3
commit cacf56f276
1 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
admin/main.php
View File

@ -56,6 +56,14 @@
$fp_admin =& new $panelclass($smarty); $fp_admin =& new $panelclass($smarty);
} }
/* check if user is loggedin */
if (!user_loggedin()) {
utils_redirect("login.php");
die();
}
$action = isset($_GET['action'])? $_GET['action'] : 'default'; $action = isset($_GET['action'])? $_GET['action'] : 'default';
if (!$fp_admin) if (!$fp_admin)
@ -71,13 +79,7 @@
$smarty->assign('panel_url', $panel_url); $smarty->assign('panel_url', $panel_url);
$smarty->assign('action_url', $action_url); $smarty->assign('action_url', $action_url);
/* check if user is loggedin */
if (!user_loggedin()) {
utils_redirect("login.php");
die();
}
if (!empty($_POST)) if (!empty($_POST))
check_admin_referer("admin_{$panel}_{$action}"); check_admin_referer("admin_{$panel}_{$action}");