Improved access check for cf_custom_field_add.php.

[timetracker.git] / cf_custom_field_add.php

diff --git a/cf_custom_field_add.php b/cf_custom_field_add.php
index 922d83b7ca6e3b2f7b95a84e5f136bf3e3c4fa97..8227d254136a2af342946f435758b3b992fafa99 100644 (file)
--- a/cf_custom_field_add.php
+++ b/cf_custom_field_add.php
@@ -39,6 +39,12 @@ if (!$user->isPluginEnabled('cf')) {
   header('Location: feature_disabled.php');
   exit();
 }
+$fields = CustomFields::getFields();
+// Deny access when max number of custom fields is already set.
+if (count($fields) >= 1) {
+  header('Location: access_denied.php');
+  exit();
+}
 
 if ($request->isPost()) {
   $cl_field_name = trim($request->getParameter('name'));