only admin can manage plugin

kalkun-sms · Jan 24, 2013 · d753f58 · d753f58
1 parent bfd1fe5
commit d753f58
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 2 deletions.
diff --git a/application/controllers/pluginss.php b/application/controllers/pluginss.php
@@ -28,6 +28,14 @@ class Pluginss extends MY_Controller {
 	function __construct()
 	{
 		parent::__construct();
+
+        // Prevent non-admin user
+        if($this->session->userdata('level') != 'admin')
+        {
+            $this->session->set_flashdata('notif', 'Only administrator can manage plugin');
+            redirect('/');
+        }
+
 		$this->load->library('Plugins');
 		$this->load->model('Plugin_model');
 	}
@@ -152,4 +160,4 @@ function deactivate($plugin_name)
 }
 
 /* End of file plugin.php */
-/* Location: ./application/controllers/plugin.php */ 
+/* Location: ./application/controllers/plugin.php */ 
diff --git a/application/plugins/Plugin_Controller.php b/application/plugins/Plugin_Controller.php
@@ -31,6 +31,13 @@ function Plugin_Controller($login=TRUE)
 	{
 		parent::__construct($login);
 
+        // Prevent non-admin user
+        if($login AND $this->session->userdata('level') != 'admin')
+        {
+            $this->session->set_flashdata('notif', 'Only administrator can manage plugin');
+            redirect('/');
+        }
+
 		/* Prevent this controller from being called directly */
 		if (get_class() == get_class($this))
 		{

diff --git a/application/views/main/menu.php b/application/views/main/menu.php
@@ -55,6 +55,6 @@
 	<?php if($this->config->item('sms_content')): ?> 
 	<li id="bottom"><?php echo anchor('member','Member'); ?></li>
 	<?php endif; ?>
+    <li><?php echo anchor('pluginss', 'Plugins'); ?></li>
 <?php endif; ?>
-<li><?php echo anchor('pluginss', 'Plugins'); ?></li>
 </ul>