New to the community? Start here

Disable accessing plugins.php by non supportes

Hi,

I install supporter plugin along with supporter-plugins.php. its working fine. But still non supporters can access "plugins.php" and activate/deactivate plugins by typing the URL in the browser.

How we can stop this.

Fri, 22 May 2009 7:30:43

drmike
- DEV MAN’s Mascot
- 466 pts: Hero points 6,133 pts: Rep. points LEVEL 24
Where within your install did you place the supporter-plugins.php file? It has to by in the mu-plugins subdirectory. (I ask because previously folks have tried installing via the plugin install script or placed it elsewhere)

Are you logged in as a site admin when trying to view it? Or have you tried it as a test user who is not a supporter?
shivaapex
- New Recruit
- 0 pts: Hero points 4 pts: Rep. points LEVEL 0
Hi,

It’s installed in the MU plugins folder. The plugin menu is not visible for the non supporters. But still they can access the plugin page by just typing the url (ex:theirblog.mainwebsite.com/plugins.php)in the browser. Then they can activate / deactivate the plugins.

Thanks
Andrew
- Champion of Loops
- 2,117 pts: Hero points 5,319 pts: Rep. points LEVEL 23
They may be able to access the page by typing in the url but any plugins they activate should be deactivated on the next page load.

Thanks,

Andrew
shivaapex
- New Recruit
- 0 pts: Hero points 4 pts: Rep. points LEVEL 0
Great. I checked it. Its working fine. Thanks for for you help.
drmike
- DEV MAN’s Mascot
- 466 pts: Hero points 6,133 pts: Rep. points LEVEL 24
You can stick in a die at the top if you want to disallow access and not allow folks to view it.
```
if (!(is_supporter))

wp_die('Whatever error you want it there');
```
Haven’t tried it but it should work.
drmike
- DEV MAN’s Mascot
- 466 pts: Hero points 6,133 pts: Rep. points LEVEL 24
An aside to Andrew: When I do a double quote here in the forum, it gets translated to &-quot-; Single quotes work fine though.
Andrew
- Champion of Loops
- 2,117 pts: Hero points 5,319 pts: Rep. points LEVEL 23
Double quotes should work just fine now.

Thanks,

Andrew
drmike
- DEV MAN’s Mascot
- 466 pts: Hero points 6,133 pts: Rep. points LEVEL 24
This is a test of double quotes:
```
if (!(is_supporter))

wp_die(&quot;Whatever error you want it there&quot;);
```
drmike
- DEV MAN’s Mascot
- 466 pts: Hero points 6,133 pts: Rep. points LEVEL 24
Afraid not.
Andrew
- Champion of Loops
- 2,117 pts: Hero points 5,319 pts: Rep. points LEVEL 23
Ah, it’s a problem with the tag. I've added this to my list but it's not a priority at the moment.

Thanks,

Andrew

How do you rate me?

Thank you for rating your experience!