From 7de9aa2398d7767db3a9aa8a558d9464b29c0535 Mon Sep 17 00:00:00 2001
From: andreubisquerra <jove@bisquerra.com>
Date: Sat, 20 Jun 2020 11:25:54 +0200
Subject: [PATCH] Add security check

---
 htdocs/takepos/admin/printqr.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/htdocs/takepos/admin/printqr.php b/htdocs/takepos/admin/printqr.php
index 1348a905608..d459fedf58f 100644
--- a/htdocs/takepos/admin/printqr.php
+++ b/htdocs/takepos/admin/printqr.php
@@ -23,6 +23,9 @@
 
 require '../../main.inc.php';
 
+// Security check
+if (!$user->admin) accessforbidden();
+
 $langs->load("cashdesk");
 
 $id = GETPOST('id', 'int');