MDL-47321 iplookup: Prevent guest users from using iplookup
authorFrederic Massart <fred@moodle.com>
Tue, 28 Oct 2014 04:04:08 +0000 (12:04 +0800)
committerSam Hemelryk <sam@moodle.com>
Mon, 3 Nov 2014 21:01:43 +0000 (10:01 +1300)
iplookup/index.php

index e26f72c..07981ed 100644 (file)
 require('../config.php');
 require_once('lib.php');
 
-require_login();
+require_login(0, false);
+if (isguestuser()) {
+    // Guest users cannot perform lookups.
+    throw new require_login_exception('Guests are not allowed here.');
+}
 
 $ip   = optional_param('ip', getremoteaddr(), PARAM_HOST);
 $user = optional_param('user', 0, PARAM_INT);