(cp 0b9e177) issue #1852 also forbid extension deletion

2026-03-28 17:42:57 +01:00 · 2023-01-25 15:21:11 +01:00
parent 53e37d3847
commit 24b439e2a7
10 changed files with 39 additions and 5 deletions
--- a/admin/include/plugins.class.php
+++ b/admin/include/plugins.class.php
@@ -107,6 +107,13 @@ class plugins
   */
  function perform_action($action, $plugin_id, $options=array())
  {
+    global $conf;
+
+    if (!$conf['enable_extensions_install'] and 'delete' == $action)
+    {
+      die('Piwigo extensions install/update/delete system is disabled');
+    }
+
    if (isset($this->db_plugins_by_id[$plugin_id]))
    {
      $crt_db_plugin = $this->db_plugins_by_id[$plugin_id];