From: Mischa POSLAWSKY <perl@shiar.org>
Date: Tue, 12 Dec 2017 22:06:58 +0000 (+0100)
Subject: admin: disallow access to unauthorised visitors
X-Git-Tag: v2.5~6
X-Git-Url: http://git.shiar.net/minimedit.git/commitdiff_plain/d96dbe100e37df1b93bb1ba531824fc6336cd32c

admin: disallow access to unauthorised visitors

Regardless of login include, this page can now be retrieved separately
so needs its own user check.
---

diff --git a/admin.php b/admin.php
index ea84e0b..e73f5b5 100644
--- a/admin.php
+++ b/admin.php
@@ -1,3 +1,14 @@
+<?php
+if (empty($User['admin'])) {
+	ob_clean();
+	http_response_code(403);
+?>
+<h2>Verboden toegang</h2>
+<p>Deze pagina is alleen voor sitebeheerders toegankelijk.</p>
+<?php
+	return;
+}
+?>
 <h3>Laatste aanpassingen</h3>
 
 <?php