Merge pull request #1461 from fabrixxm/issue-1459

Block settings page for unauthorized users

diff --git a/mod/settings.php b/mod/settings.php
index b01c4fabde7b2f3cc7714f21ce33ff2fbf26040c..5ae30d7d366274969a767ebbb373a5e3dae2c4c4 100644 (file)
--- a/mod/settings.php
+++ b/mod/settings.php
@@ -16,6 +16,11 @@ function get_theme_config_file($theme){
 
 function settings_init(&$a) {
 
+       if(! local_user()) {
+               notice( t('Permission denied.') . EOL );
+               return;
+       }
+
        // APC deactivated, since there are problems with PHP 5.5
        //if (function_exists("apc_delete")) {
        //      $toDelete = new APCIterator('user', APC_ITER_VALUE);
@@ -593,7 +598,7 @@ function settings_content(&$a) {
        nav_set_selected('settings');
 
        if(! local_user()) {
-               notice( t('Permission denied.') . EOL );
+               #notice( t('Permission denied.') . EOL );
                return;
        }