From d96dbe100e37df1b93bb1ba531824fc6336cd32c Mon Sep 17 00:00:00 2001
From: Mischa POSLAWSKY <perl@shiar.org>
Date: Tue, 12 Dec 2017 23:06:58 +0100
Subject: [PATCH] admin: disallow access to unauthorised visitors

Regardless of login include, this page can now be retrieved separately
so needs its own user check.
---
 admin.php | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/admin.php b/admin.php
index ea84e0b..e73f5b5 100644
--- a/admin.php
+++ b/admin.php
@@ -1,3 +1,14 @@
+<?php
+if (empty($User['admin'])) {
+	ob_clean();
+	http_response_code(403);
+?>
+<h2>Verboden toegang</h2>
+<p>Deze pagina is alleen voor sitebeheerders toegankelijk.</p>
+<?php
+	return;
+}
+?>
 <h3>Laatste aanpassingen</h3>
 
 <?php
-- 
2.30.0