From cb5d3d8b1a32a4cfed09bd379ac60e89d0a72157 Mon Sep 17 00:00:00 2001
From: Matt Pass <matt@mattpass.com>
Date: Thu, 30 Jan 2014 07:34:44 +0000
Subject: [PATCH] Retstrict changes to plugins to auth'd users

---
 lib/plugins-manager.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/plugins-manager.php b/lib/plugins-manager.php
index c6eac5c..4b367db 100644
--- a/lib/plugins-manager.php
+++ b/lib/plugins-manager.php
@@ -15,7 +15,7 @@ if (ini_get('allow_url_fopen')) {
 $pluginsData = json_decode($pluginsDataJS, true);
 
 // If we have an action to perform
-if (isset($_GET['action'])) {
+if (!$demoMode && isset($_SESSION['loggedIn']) && $_SESSION['loggedIn'] && isset($_GET['action'])) {
 
 	// Get our old plugin & user settings
 	$oldPlugins = $ICEcoder["plugins"];