Stop Plugins being viewed

Is there a way to stop people from being able to load a plugin seperately rather than its intended way, within a page?

Would security assist work in this case if applied to a plugin page or would it apply its page access to the complete page as well?

You could probably just set a variable on the page that contains the plugin, then add a check to plugin pages.

So if you were to add to the original page:

<?php
$includedOnPage = true;
?>

then you could include in each plugin:

<?php
if (!isset($includedOnPage)) die();
?>

That would prevent the plugin from being viewed directly.

Wouldn't you use the "show if" utility function in framework based on the users security level setting ?

Russ

I would agree with Russell on this... simply set the user level in a session variable and then show if that variable is equal to the desired level.

That would work to make sure someone logged in first, but you could still view the plugin page outside of context since the session would still exist.

<?php
if (!isset($includedOnPage)) die();
?>

is also concept use by many CMS including joomle... this is the best approach..

for integration with session.. i think it's the a good wishlist for dot release

Originally Said By: victor278184

  <?php
if (!isset($includedOnPage)) die();
?>

is also concept use by many CMS including joomle... this is the best approach..

for integration with session.. i think it's the a good wishlist for dot release  

Is all you have to do is copy this code into the page that gets included? If so, does it matter where? I assume just at the top of the code would be fine?

Brad

EDIT: Actually I just tried it and it works amazing. Thats a very handy bit of code.

Originally Said By: victor278184

  <?php
if (!isset($includedOnPage)) die();
?>

is also concept use by many CMS including joomle... this is the best approach..

for integration with session.. i think it's the a good wishlist for dot release  

oops, actually this doesn't work .... even when it is included in the page it still dies. The whole page that it is being inserted into dies.

Brad

Originally Said By: Brad Lawryk

  oops, actually this doesn't work .... even when it is included in the page it still dies. The whole page that it is being inserted into dies.

Brad  

Ignore ... really bad day. This works awesome. Thanks for the code, Ray.

Brad