Admin pages are for admins only, right?

14 years ago · ddc2a70de9
parent 61ffa182ee
commit ddc2a70de9
4 changed files with 4 additions and 4 deletions
--- a/admin/index.php
+++ b/admin/index.php
@ -23,7 +23,7 @@

 require_once('../lib/base.php');
 oc_require( 'template.php' );
-if( !OC_USER::isLoggedIn()){
+if( !OC_USER::isLoggedIn() || !OC_USER::ingroup( $_SESSION['username'], 'admin' )){
 	header( "Location: ".OC_UTIL::linkto( "index.php" ));
 	exit();
 }
--- a/admin/plugins.php
+++ b/admin/plugins.php
@ -23,7 +23,7 @@

 require_once('../lib/base.php');
 oc_require( 'template.php' );
-if( !OC_USER::isLoggedIn()){
+if( !OC_USER::isLoggedIn() || !OC_USER::ingroup( $_SESSION['username'], 'admin' )){
 	header( "Location: ".OC_UTIL::linkto( "index.php" ));
 	exit();
 }
--- a/admin/system.php
+++ b/admin/system.php
@ -23,7 +23,7 @@

 require_once('../lib/base.php');
 oc_require( 'template.php' );
-if( !OC_USER::isLoggedIn()){
+if( !OC_USER::isLoggedIn() || !OC_USER::ingroup( $_SESSION['username'], 'admin' )){
 	header( "Location: ".OC_UTIL::linkto( "index.php" ));
 	exit();
 }
--- a/admin/users.php
+++ b/admin/users.php
@ -23,7 +23,7 @@

 require_once('../lib/base.php');
 oc_require( 'template.php' );
-if( !OC_USER::isLoggedIn()){
+if( !OC_USER::isLoggedIn() || !OC_USER::ingroup( $_SESSION['username'], 'admin' )){
 	header( "Location: ".OC_UTIL::linkto( "index.php" ));
 	exit();
 }