From 0d1341a930336b2265c2b69a813df94238b5eb56 Mon Sep 17 00:00:00 2001
From: pecesama <pecesama@gmail.com>
Date: Thu, 23 Oct 2008 18:12:38 +0000
Subject: [PATCH] exit() after headers

---
 admin/index.php | 4 +---
 login.php       | 7 ++++---
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/admin/index.php b/admin/index.php
index baf5266..caf16fa 100644
--- a/admin/index.php
+++ b/admin/index.php
@@ -12,8 +12,6 @@ if(!defined('entry'))define('entry', true);
   =========================== */
 ?>
 <?php
-
-
 require('../entry.php');
 global $user, $conf, $tumble;
 $template = new plantillas("admin");
@@ -21,7 +19,7 @@ $template = new plantillas("admin");
 $isEdition = (isset($_GET["edit"])) ? true : false;
 $postId = ($isEdition) ? $_GET["edit"] : NULL;
 
-if ($user->isAdmin()) {
+if ($user->isAuthenticated()) {
 
 	if (isset($_GET["delete"])) {
 		$tumble->deletePost($_GET['delete']);
diff --git a/login.php b/login.php
index 2475048..b3fb7f0 100644
--- a/login.php
+++ b/login.php
@@ -21,11 +21,12 @@ if ($user->isAuthenticated()) {
 	header("Location: ".$conf->urlGelato."/admin/index.php");
 } else {
 	if (isset($_POST["pass"]) && isset($_POST["login"])) {		
-		//print "<pre>"; print_r($_SESSION); print "</pre>";die();
-		if ($user->validateUser($_POST['login'], md5($_POST['pass']))) {
+		if ($user->validateUser($_POST['login'], md5($_POST['pass']))) {			
 			header("Location: ".$conf->urlGelato."/admin/index.php");
-		} else {
+			exit();
+		} else {			
 			header("Location: ".$conf->urlGelato."/login.php?error=1");
+			exit();
 		}
 	} else {
 ?>