rpicms

commit ac8e250403ea4c11a8fd5f60457d5cb622bbeb0b
parent da67af0e4e197eb2a7506d8e013c3cf549d32c58
Author: MTRNord <mtrnord1@gmail.com>
Date:   Thu, 16 Apr 2015 19:50:36 +0200

update security check

Diffstat:
M
themes/jumbotron/admin.php
 | 
17
+----------------

1 file changed, 1 insertion(+), 16 deletions(-)
diff --git a/themes/jumbotron/admin.php b/themes/jumbotron/admin.php
@@ -18,6 +18,7 @@ if ($root_3[1] == 'core') {
 }else{
   $root = $root_1 . '/' . $root_3[1];
 }
+if (!securePage($_SERVER['PHP_SELF'])){die();}
 #######################
 # flush browser cache #
 #######################
@@ -33,16 +34,6 @@ if (mysqli_connect_errno()) {
 	printf("Verbindung fehlgeschlagen: %s\n", mysqli_connect_error());
 	exit();
 }
-$user = "test";
-if ($resultat = $connection->query("SELECT * FROM allowed_user WHERE email LIKE '$user'")) {
-	while($daten = $resultat->fetch_object() ){
- 		$allowed_user = $daten->email;
-	}
-}
-#if (empty($allowed_user)) {
-#	echo "You not logged in!";
-#}else{
-if($allowed_user == $user){
 
 ################
 # lang support #
@@ -317,9 +308,3 @@ foreach($langs as $prio => $lang) {
     <?php include($root . '/core/backend/admin/modules/script_footer.php'); ?>
   </body>
 </html>
-<?php
-}else{
-	echo "You not logged in!";
-	header('HTTP/1.1 401 Unauthorized', true, 401);
-}
-?>