From e5b28180a52b210b196f228987f62c32537469c5 Mon Sep 17 00:00:00 2001
From: Ian <aristophian@googlemail.com>
Date: Sun, 5 Jan 2014 14:14:37 +0100
Subject: [PATCH] enhance 7cf4c12 - hardened by admin only

---
 include/plugin_api.inc.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/include/plugin_api.inc.php b/include/plugin_api.inc.php
index 11738529..ff112903 100644
--- a/include/plugin_api.inc.php
+++ b/include/plugin_api.inc.php
@@ -42,7 +42,9 @@ function serendipity_plugin_api_frontend_header($event_name, &$bag, &$eventData,
     </script>
 <?php
     }
-    // add a global available (index.tpl; admin/index.tpl; preview_iframe.tpl) redirect error string function used by errorToExceptionHandler()
+    // add a global available (index.tpl; admin/index.tpl; preview_iframe.tpl) redirect error string function used by errorToExceptionHandler() - hardened by admin only
+    if ($serendipity['production'] === true) {
+        if( $serendipity['serendipityUserlevel'] >= USERLEVEL_ADMIN ) {
 ?>
     <script type="text/javascript">
     function create(htmlStr) { 
@@ -56,6 +58,8 @@ function serendipity_plugin_api_frontend_header($event_name, &$bag, &$eventData,
     }
     </script>
 <?php
+        }
+    }
 }