From 17c17807cc0b63d322d56acfae4f30399041cdb5 Mon Sep 17 00:00:00 2001 From: brettp Date: Fri, 16 Oct 2009 02:33:55 +0000 Subject: Standardized files git-svn-id: http://code.elgg.org/elgg/trunk@3553 36083f99-b078-4883-b0ff-0f9b5a30f544 --- settings/plugins.php | 39 +++++++++++++++++++-------------------- 1 file changed, 19 insertions(+), 20 deletions(-) (limited to 'settings/plugins.php') diff --git a/settings/plugins.php b/settings/plugins.php index 3db665a16..219302ebc 100644 --- a/settings/plugins.php +++ b/settings/plugins.php @@ -1,24 +1,23 @@ canEdit())) { - set_page_owner($_SESSION['guid']); - } +// Make sure only valid users can see this +gatekeeper(); - // Display main admin menu - page_draw(elgg_echo("usersettings:plugins"),elgg_view_layout('two_column_left_sidebar','',elgg_view_title(elgg_echo("usersettings:plugins")) . elgg_view("usersettings/plugins", array('installed_plugins' => get_installed_plugins())))); -?> \ No newline at end of file +// Make sure we don't open a security hole ... +if ((!page_owner_entity()) || (!page_owner_entity()->canEdit())) { + set_page_owner($_SESSION['guid']); +} + +// Display main admin menu +page_draw(elgg_echo("usersettings:plugins"),elgg_view_layout('two_column_left_sidebar','',elgg_view_title(elgg_echo("usersettings:plugins")) . elgg_view("usersettings/plugins", array('installed_plugins' => get_installed_plugins())))); -- cgit v1.2.3