Technical Support Forums

Free, outstanding support from WebAssist and your colleagues

› WebAssist Forums › PowerStore › Powerstore General / Announcements › Admin menu should not show - security issue

Admin menu should not show - security issue

Thread began 4/11/2011 1:03 pm by Daniel69688 | Last modified 4/12/2011 1:42 pm by Jason Byrnes | 1307 views | 3 replies |

4/11/2011 1:03 pm | #1 Daniel69688Beta Tester

Admin menu should not show - security issue

Ray,
the admin/index.php file has a menu showing and the login area.
I really think this is a security issue, as the menu exposes file and path names prior to login.

Please tell me what file I can modify that refrences the navigation menu, I have been searching all morning.

Thanks

4/11/2011 1:40 pm | #2 Jason ByrnesWebAssist

edit the webassist/plugins/admin_menu/menu.php.php file. add the following code just after the <body> tag:

php:

<?php if(WA_Auth_RulePasses("Administrator")) { ?>

and this code just before theb </body> tag:

php:

<?php } ?>

4/12/2011 1:35 pm | #3 Daniel69688Beta Tester

Thanks

That did the trick. But I see there is already code that checks for super admin.
I assume there is no problem having multiple if statements.

-Daniel

4/12/2011 1:42 pm | #4 Jason ByrnesWebAssist

no, no problem with multiple if statements.

the code to check for supper admin is there so that only the supper admin can modify the store theme.

Build websites with a little help from your friends

Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.

Build websites from already-built web applications

These out-of-the-box solutions provide you proven, tested applications that can be up and running now. Build a store, a gallery, or a web-based email solution.