Merge pull request #2627 from laf/settings-level

Updated userlevel access on settings page

html/pages/settings.inc.php

@@ -53,7 +53,8 @@ echo $pagetitle[0];
 
 <?php
 
-if (isset($vars['sub'])) {
+if (is_admin() === true) {
+    if (isset($vars['sub'])) {
 
         if (file_exists("pages/settings/".mres($vars['sub']).".inc.php")) {
             require_once "pages/settings/".mres($vars['sub']).".inc.php";
@@ -62,8 +63,8 @@ if (isset($vars['sub'])) {
             print_error("This settings page doesn't exist, please go to the main settings page");
         }
 
-}
-else {
+    }
+    else {
 
 ?>
 
@@ -100,12 +101,7 @@ else {
             $r .= '</tbody></table>';
             return $r;
         }
-    if( $_SESSION['userlevel'] >= 10 ) {
         echo "<div class='table-responsive'>".a2t($config)."</div>";
-    }
-    else {
-        include 'includes/error-no-perm.inc.php';
-    }
 
         if ($_SESSION['userlevel'] >= '10') {
 
@@ -118,5 +114,9 @@ else {
         else {
             include 'includes/error-no-perm.inc.php';
         }
+    }
+}
+else {
+    include 'includes/error-no-perm.inc.php';
 }
 ?>