diff --git a/Admin/admin.php b/Admin/admin.php index 4a24da68..47c16654 100644 --- a/Admin/admin.php +++ b/Admin/admin.php @@ -593,29 +593,30 @@ if (!empty($_GET['p'])) {
CheckLogin()) - { - if($_POST || $_GET) - { - if($_GET['p'] and $_GET['p']!="search") - { - $filename = 'Templates/'.$_GET['p'].'.tpl'; - if(file_exists($filename)) include($filename); - else include('Templates/404.tpl'); - } - else include('Templates/search.tpl'); + if($funct->CheckLogin()) + { + if($_POST || $_GET) + { + $p = $_GET['p'] ?? ''; + if($p && $p != "search") + { + $filename = 'Templates/'.$p.'.tpl'; + if(file_exists($filename)) include($filename); + else include('Templates/404.tpl'); + } + else include('Templates/search.tpl'); - if(isset($_POST['p']) && isset($_POST['s']) && $_POST['p'] and $_POST['s']) - { - $filename = 'Templates/results_'.$_POST['p'].'.tpl'; - if(file_exists($filename)) include($filename); - else include('Templates/404.tpl'); - } - } - else include('Templates/home.tpl'); - } - else include('Templates/login.tpl'); - ?> + if(isset($_POST['p']) && isset($_POST['s']) && $_POST['p'] && $_POST['s']) + { + $filename = 'Templates/results_'.$_POST['p'].'.tpl'; + if(file_exists($filename)) include($filename); + else include('Templates/404.tpl'); + } + } + else include('Templates/home.tpl'); + } + else include('Templates/login.tpl'); +?>