Fixed serious bug that allowed any existing user to use this page. Doh!

diff --git a/admin/index.php b/admin/index.php
index 080d854c3ebbf20f516750889d0efac669d266fe..c68dd77ce12d19e69e4edbc9392dfe3ffc400be8 100644 (file)
--- a/admin/index.php
+++ b/admin/index.php
@@ -69,11 +69,10 @@
     }
 
     if (!isadmin()) {
-        if (record_exists_sql("SELECT * FROM user_admins")) {
-            require_login();
-        } else {
+        if (! record_exists_sql("SELECT * FROM user_admins")) {
             redirect("user.php");
         }
+        error("You need to be an admin user to use this page.", "$CFG->wwwroot/login/");
     }