From 488a911657c084a4a7201c2fde0a1ca074875345 Mon Sep 17 00:00:00 2001
From: mistic100 <mistic@piwigo.org>
Date: Sat, 2 Apr 2011 14:07:26 +0000
Subject: bug:2022 admins can uninstall plugins

git-svn-id: http://piwigo.org/svn/trunk@9994 68402e56-0260-453c-a942-63ccdbb3a9ee
---
 admin/plugins_list.php | 21 ++++++++++++++-------
 1 file changed, 14 insertions(+), 7 deletions(-)

(limited to 'admin')

diff --git a/admin/plugins_list.php b/admin/plugins_list.php
index 0a8d77f9f..1a25ce009 100644
--- a/admin/plugins_list.php
+++ b/admin/plugins_list.php
@@ -38,17 +38,24 @@ $plugins = new plugins();
 //--------------------------------------------------perform requested actions
 if (isset($_GET['action']) and isset($_GET['plugin']))
 {
-  check_pwg_token();
+  if ($_GET['action'] == 'uninstall' AND !is_webmaster())
+  {
+    array_push($page['errors'], l10n('Webmaster status is required.'));
+  }
+  else
+  {
+    check_pwg_token();
 
-  $page['errors'] = $plugins->perform_action($_GET['action'], $_GET['plugin']);
+    $page['errors'] = $plugins->perform_action($_GET['action'], $_GET['plugin']);
 
-  if (empty($page['errors']))
-  {
-    if ($_GET['action'] == 'activate' or $_GET['action'] == 'deactivate')
+    if (empty($page['errors']))
     {
-      $template->delete_compiled_templates();
+      if ($_GET['action'] == 'activate' or $_GET['action'] == 'deactivate')
+      {
+        $template->delete_compiled_templates();
+      }
+      redirect($base_url);
     }
-    redirect($base_url);
   }
 }
 
-- 
cgit v1.2.3