From 09a00911c23d4e351a7cf2c81bd644b696163235 Mon Sep 17 00:00:00 2001
From: plegall <plg@piwigo.org>
Date: Fri, 20 Dec 2013 12:59:07 +0000
Subject: feature 1668: protect dataTables backend script (ajax called,
 serverside processing)

git-svn-id: http://piwigo.org/svn/trunk@26050 68402e56-0260-453c-a942-63ccdbb3a9ee
---
 admin/user_list_backend.php | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'admin')

diff --git a/admin/user_list_backend.php b/admin/user_list_backend.php
index 7ccdb96d3..1fbba5d63 100644
--- a/admin/user_list_backend.php
+++ b/admin/user_list_backend.php
@@ -3,6 +3,8 @@ define('PHPWG_ROOT_PATH','../');
 define('IN_ADMIN', true);
 
 include_once(PHPWG_ROOT_PATH.'include/common.inc.php');
+
+check_status(ACCESS_ADMINISTRATOR);
 	
 /* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
  * Easy set variables
-- 
cgit v1.2.3