github-mirror/framework
2
0
Fork 0
mirror of https://github.com/flarum/framework.git synced 2025-01-19 18:12:59 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Don't allow guests into the admin area

Browse Source
This commit is contained in:
Toby Zerner 2015-03-30 12:43:55 +10:30
parent 1286a52e1d
commit a43957e1e2
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/Admin/Middleware/LoginWithCookieAndCheckAdmin.php
View File

@ -16,12 +16,11 @@ class LoginWithCookieAndCheckAdmin
public function handle($request, Closure $next)
{
if (($token = $request->cookie('flarum_remember')) &&
($accessToken = AccessToken::where('id', $token)->first())) {
$user = $accessToken->user;
if (! $user->isAdmin()) {
die('ur not an admin');
}
$this->actor->setUser($user);
($accessToken = AccessToken::where('id', $token)->first()) &&
$accessToken->user->isAdmin()) {
$this->actor->setUser($accessToken->user);
} else {
die('ur not an admin');
}
return $next($request);