From 2521ba44fed09eaf8ba8569e783e1c7468e3f31d Mon Sep 17 00:00:00 2001
From: polo <ordipolo@gmx.fr>
Date: Thu, 19 Jun 2025 03:00:57 +0200
Subject: mode admin et non admin

---
 src/post-ajax.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'src/post-ajax.php')

diff --git a/src/post-ajax.php b/src/post-ajax.php
index df5a01a..bedfed5 100644
--- a/src/post-ajax.php
+++ b/src/post-ajax.php
@@ -1,5 +1,7 @@
 <?php
-if($_SERVER['REQUEST_METHOD'] === 'POST'){ // && $_SESSION['admin'] === true
+session_start();
+
+if(isset($_SESSION['admin']) && $_SESSION['admin'] === true && $_SERVER['REQUEST_METHOD'] === 'POST'){ // && $_SESSION['admin'] === true
 	if($_SERVER['CONTENT_TYPE'] === 'application/json'){
 		$data = file_get_contents('php://input');
 		$json = json_decode($data, true);
-- 
cgit v1.2.3