From eae4be651eb6735d54167820a940b6cfab806e63 Mon Sep 17 00:00:00 2001 From: Matias Griese Date: Wed, 5 Sep 2018 11:23:15 +0300 Subject: [PATCH] Fire new `OnAdminPage` event only if user has been logged in --- admin.php | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/admin.php b/admin.php index 8be6329c..fa88d0c2 100644 --- a/admin.php +++ b/admin.php @@ -384,12 +384,14 @@ class AdminPlugin extends Plugin $page = new Page; $page->expires(0); - $event = new Event(['page' => $page]); - $event = $this->grav->fireEvent('onAdminPage', $event); - $page = $event['page']; + if ($this->grav['user']->authorize('admin.login')) { + $event = new Event(['page' => $page]); + $event = $this->grav->fireEvent('onAdminPage', $event); + $page = $event['page']; - if ($page->slug()) { - return $page; + if ($page->slug()) { + return $page; + } } // Look in the pages provided by the Admin plugin itself