From 8597446abc2301d017829efe2a746fad4dbcf6a1 Mon Sep 17 00:00:00 2001 From: "Fedor A. Fetisov" Date: Sun, 22 Dec 2013 04:26:03 +0400 Subject: [PATCH] Restrict access to login-related pages for authenticated operators --- src/mibew/operator/login.php | 5 +++++ src/mibew/operator/resetpwd.php | 5 +++++ 2 files changed, 10 insertions(+) diff --git a/src/mibew/operator/login.php b/src/mibew/operator/login.php index 538f2020..c07a2028 100644 --- a/src/mibew/operator/login.php +++ b/src/mibew/operator/login.php @@ -18,6 +18,11 @@ require_once('../libs/common.php'); require_once('../libs/operator.php'); +if (check_login(false)) { + header("Location: $mibewroot/operator/"); + exit; +} + $errors = array(); $page = array('formisRemember' => true, 'version' => $version); diff --git a/src/mibew/operator/resetpwd.php b/src/mibew/operator/resetpwd.php index b6eade11..709ad0cc 100644 --- a/src/mibew/operator/resetpwd.php +++ b/src/mibew/operator/resetpwd.php @@ -19,6 +19,11 @@ require_once('../libs/common.php'); require_once('../libs/operator.php'); require_once('../libs/settings.php'); +if (check_login(false)) { + header("Location: $mibewroot/operator/"); + exit; +} + $errors = array(); $page = array('version' => $version, 'showform' => true);