do not under any circumstances allow a delegated forum admin to access the site admin page.

1 files changed, 7 insertions, 0 deletions

diff --git a/mod/admin.php b/mod/admin.php
index e44404097..c79af8d5b 100755
--- a/mod/admin.php
+++ b/mod/admin.php
@@ -9,6 +9,10 @@ function admin_post(&$a){
 	if(!is_site_admin()) {
 		return;
 	}
+
+
+	if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
+		return;
 	
 	// urls
 	if ($a->argc > 1){
@@ -50,6 +54,9 @@ function admin_content(&$a) {
 		return login(false);
 	}
 
+	if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
+		return;
+
 	/**
 	 * Side bar links
 	 */