View Single Post
  #4 (permalink)  
Old 01-09-2007, 10:19 PM
stevux stevux is offline
New Pligger
 
Join Date: Aug 2006
Posts: 6
thanks,

What I've found is that its better to just restrict access to the page for any user of a non admins / [any predefined user level] users

you can eliminate the link in the tpl file by doing a check but the submit.php page can still be accessed....


I have found some code in admin_index.php that seems to do the check im trying to perform:

PHP Code:
force_authentication();

    
$amIgod 0;
    
$amIgod $amIgod checklevel('god');
    
$main_smarty->assign('amIgod'$amIgod);

    
$canIhaveAccess 0;
    
$canIhaveAccess $canIhaveAccess checklevel('god');
    
$canIhaveAccess $canIhaveAccess checklevel('admin');
    
    
$main_smarty->assign('isAdmin'$canIhaveAccess); 


This code seems to decide whether the given user is of level admin or god

How and where would I add this code in the submit.php file to do the same check and allow only admins/gods/ my custom user level users to access submit.php

thanks!
Reply With Quote