do not under any circumstances allow a delegated forum admin to access the site admin page.

11 years ago · 0500fc2826
parent 48f5bd492d
commit 0500fc2826
1 changed files with 7 additions and 0 deletions
--- a/mod/admin.php
+++ b/mod/admin.php
@ -9,6 +9,10 @@ function admin_post(&$a){
 	if(!is_site_admin()) {
 		return;
 	}
+
+
+	if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
+		return;
 	
 	// urls
 	if ($a->argc > 1){
@ -50,6 +54,9 @@ function admin_content(&$a) {
 		return login(false);
 	}

+	if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
+		return;
+
 	/**
 	 * Side bar links
 	 */