searchall only available if logged in

2013-07-19 13:20:39 +02:00
parent 29ec5f7d16
commit 080c764876
1 changed files with 8 additions and 1 deletions
--- a/htdocs/search.php
+++ b/htdocs/search.php
@ -376,7 +376,14 @@
 		}
 		elseif (isset($_REQUEST['searchall']))
 		{
-			$options['searchtype'] = 'all';
+			if (!$login->logged_in())
+			{
+				// This operation is very expensive and therefore available only
+				// for logged-in users.
+				$tpl->error(ERROR_LOGIN_REQUIRED);
+			}
+			else
+				$options['searchtype'] = 'all';
 		}
 		else
 		{