Adding and deleting users

1 files changed, 11 insertions, 0 deletions

diff --git a/login.php b/login.php
index e60b7ed..d21fe79 100644
--- a/login.php
+++ b/login.php
@@ -87,3 +87,14 @@ if (!isset($_SESSION['login']) || $_SESSION['login'] === false) {
 }
 
 $_user = new user($_pdo, $_SESSION['login']);
+
+if (defined('REQUIRE_ADMIN') && REQUIRE_ADMIN && !$_user->isAdmin()) {
+	include('./header.php');
+	include('./nav.php');
+	?>
+	<h1>Access denied</h1>
+	<p class="lead">You need to be an administrator to access this page.</p>
+	<?php
+	include('./footer.php');
+	die();
+}