Merge pull request #1181 from chillu/pulls/showtemplate-admin

API Require ADMIN for ?showtemplate=1 (2.4)
This commit is contained in:
Sean Harvey 2013-02-12 15:07:13 -08:00
commit 9337902fdd

View File

@ -401,7 +401,7 @@ class SSViewer {
}
if(isset($_GET['showtemplate']) && !Director::isLive()) {
if(isset($_GET['showtemplate']) && $_GET['showtemplate'] && Permission::check('ADMIN')) {
$lines = file($cacheFile);
echo "<h2>Template: $cacheFile</h2>";
echo "<pre>";
@ -680,7 +680,7 @@ class SSViewer_FromString extends SSViewer {
fwrite($fh, $template);
fclose($fh);
if(isset($_GET['showtemplate']) && $_GET['showtemplate']) {
if(isset($_GET['showtemplate']) && $_GET['showtemplate'] && Permission::check('ADMIN')) {
$lines = file($tmpFile);
echo "<h2>Template: $tmpFile</h2>";
echo "<pre>";