Post merge conflicts

admin.php

@@ -383,6 +383,7 @@ class AdminPlugin extends Plugin
                 // Create user object and save it
                 $user = $users->load($username);
                 $user->update($data);
+                $user->set('access', ['admin' => ['login' => true, 'super' => true], 'site' => ['login' => true]]);
                 $user->save();
 
                 // Login user

classes/Router.php

@@ -1,31 +0,0 @@
-<?php
-
-namespace Grav\Plugin\Admin;
-
-use Grav\Common\Processors\ProcessorBase;
-use Psr\Http\Message\ResponseInterface;
-use Psr\Http\Message\ServerRequestInterface;
-use Psr\Http\Server\RequestHandlerInterface;
-
-class Router extends ProcessorBase
-{
-    public $id = 'admin_router';
-    public $title = 'Admin Panel';
-
-    /**
-     * Admin router.
-     *
-     * @param ServerRequestInterface $request
-     * @param RequestHandlerInterface $handler
-     * @return ResponseInterface
-     */
-    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler) : ResponseInterface
-    {
-        $this->startTimer();
-        $response = $handler->handle($request);
-        $this->stopTimer();
-
-        // Never allow admin pages to be rendered in <frame>, <iframe>, <embed> or <object> for improved security.
-        return $response->withHeader('X-Frame-Options', 'NONE');
-    }
-}

classes/plugin/AdminController.php

@@ -2536,11 +2536,10 @@ class AdminController extends AdminBaseController
         }
 
         $this->uri = $this->uri ?? $this->grav['uri'];
-        $this->grav['twig']->twig_vars['current_form_data'] = (array)$this->data;
 
         $field = (string)$this->uri->post('field', '');
         $order = $this->uri->post('order') ?: null;
-        if (!is_array($order)) {
+        if ($order && is_string($order)) {
             $order = array_map('trim', explode(',', $order));
         }
 

classes/plugin/Router.php

@@ -53,6 +53,7 @@ class Router extends ProcessorBase
 
         $this->stopTimer();
 
-        return $response;
+        // Never allow admin pages to be rendered in <frame>, <iframe>, <embed> or <object> for improved security.
+        return $response->withHeader('X-Frame-Options', 'NONE');
     }
 }