From 411017f50711c697ee6fefe0f158c9d433b6bef4 Mon Sep 17 00:00:00 2001
From: Wisdurm <luukas.kola@gmail.com>
Date: Thu, 30 Oct 2025 11:51:30 +0200
Subject: [PATCH] Lukitse admin paneeli oppilailta pois

---
 admin.php  | 13 ++++++++++---
 header.php |  4 ++++
 2 files changed, 14 insertions(+), 3 deletions(-)

diff --git a/admin.php b/admin.php
index df44fe6..ae2e446 100644
--- a/admin.php
+++ b/admin.php
@@ -1,8 +1,15 @@
 <?php
-    include "connect.php";
+	include "connect.php";
+	include "kirjautunut.php";
+	if (!$op) { // Jos ei opettaja, potki pois
+		// Redirect
+		$newURL = "index.php";
+		header('Location: '.$newURL);
+		die();
+	}
 
     // Vaihda rooli
-    if (isset($_POST['rooli']) && $_SERVER['REQUEST_METHOD'] === 'POST') {
+    if (isset($_POST['rooli']) && $_SERVER['REQUEST_METHOD'] === 'POST' and $op) {
         $id = $_POST["id"];
         $rooli = $_POST['rooli'];
 
@@ -77,4 +84,4 @@
         </table>
     </main>
 </body>
-</html>
\ No newline at end of file
+</html>
diff --git a/header.php b/header.php
index 62befe9..f30c1bc 100644
--- a/header.php
+++ b/header.php
@@ -14,6 +14,10 @@ $conn->close();
 			echo	"Kirjauduttu sisään, tervetuloa {$tunnus}";
 			echo 	"<span>·</span>";
 			echo 	"<a href='kirjaudu_ulos.php'>Kirjaudu ulos</a>";
+			if ($op) {
+				echo 	"<span>·</span>";
+				echo 	"<a href='admin.php'>Admin paneeli</a>";
+			}
 		}
 		else {
 			echo	"<a href='kirjautuminen.php'>Kirjaudu sisään</a>";
-- 
2.47.3