Added checks for admin permissions to settings / users.

Added welcome message and start page contents in input interface (iss0000160).
This commit is contained in:
2018-06-18 15:07:38 +02:00
committed by Stefan Rohde-Enslin
parent 067beedf29
commit c6f481ffcb
8 changed files with 65 additions and 4 deletions

View File

@ -23,10 +23,14 @@ loadHttpToGlobals(["id", "task", "content"]);
define("targetFile", __DIR__ . "/../data/$id.htm");
if (!isset($id) or !in_array($id, ['footer', 'aside', 'banner'])) {
if (!isset($id) or !in_array($id, ['footer', 'aside', 'banner', 'welcomeMsg'])) {
echo printErrorPage($translations['specifyToEdit']); return;
}
if ($id == 'welcomeMsg' and !$_SESSION['admin']) {
echo printErrorPage($translations['accessDenied']); return;
}
// Read file contents if there is no new content sent by $_POST.
if (!isset($content)) {