From 2c324332f33fca688d782b55a51d38a793a18430 Mon Sep 17 00:00:00 2001 From: Brett Profitt Date: Sun, 22 Apr 2012 16:31:38 -0700 Subject: Fixes #4439. Redirecting if trying to view a plugin object outside of admin. --- views/default/object/plugin.php | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'views') diff --git a/views/default/object/plugin.php b/views/default/object/plugin.php index 2f64cfcc9..5c7138e96 100644 --- a/views/default/object/plugin.php +++ b/views/default/object/plugin.php @@ -7,6 +7,10 @@ * */ +if (!elgg_in_context('admin')) { + forward('/', 403); +} + $plugin = $vars['entity']; if (!$plugin->isValid()) { -- cgit v1.2.3