From 0500fc2826e01d0570139fe5218f223d3a918970 Mon Sep 17 00:00:00 2001 From: friendica Date: Thu, 16 Feb 2012 23:50:57 -0800 Subject: [PATCH] do not under any circumstances allow a delegated forum admin to access the site admin page. --- mod/admin.php | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/mod/admin.php b/mod/admin.php index e444040973..c79af8d5ba 100755 --- a/mod/admin.php +++ b/mod/admin.php @@ -9,6 +9,10 @@ function admin_post(&$a){ if(!is_site_admin()) { return; } + + + if(x($_SESSION,'submanage') && intval($_SESSION['submanage'])) + return; // urls if ($a->argc > 1){ @@ -50,6 +54,9 @@ function admin_content(&$a) { return login(false); } + if(x($_SESSION,'submanage') && intval($_SESSION['submanage'])) + return; + /** * Side bar links */