Плагин 1,5 и 1,7 Joomla plg_backendtoken-1.2 - Joomla 1.5: Установка и обновление

<?php


// no direct access
defined('_JEXEC') or die('Restricted access');

jimport( 'joomla.plugin.plugin' );

class plgSystemSecurity extends  JPlugin 
{

	function plgSecurity( &$subject, $config = array() )
	{
		parent :: __construct($subject, $config);
		
		$plugin =& JPluginHelper::getPlugin( 'system', 'Security');
 		$this->params = new JParameter( $plugin->params );	
	}

	function onAfterInitialise()
	{
		$app = JFactory::getApplication();

		if( !$app->isAdmin() ) 
		{
			return;
		}
				
		//already logged in
		$user =& JFactory::getUser();
 
		if( !$user->guest )
		{
		 	return;
		}
				
		$token   = $this->params->get('token', 1);
		

		if( JRequest::getMethod() == 'GET' )
		{		
			$request = JRequest::getVar( 'token', 'no token set', 'GET' );
		}
		
		if( JRequest::getMethod() == 'POST' )
		{		
			$ref =  $_SERVER['HTTP_REFERER'];
			$u =& JURI::getInstance( $ref );
			$request = $u->getVar( 'token', 'no token set' );			
		}		
		
		//invalid access token
		if( $token != $request )
		{
			$url = $this->params->get('url' );
			
			//fallback to site
			if( 0 == strlen( $url ) )
			{
				$url = JURI::root();		
			}
			
			$app->redirect( $url );
			die;			
		}
	}
}

?>

<?xml version="1.0" encoding="utf-8"?>
<install version="1.6" type="plugin" group="system">
	<name>Securityadmin</name>
	<author>Zaharenko Konstantin</author>
	<authorUrl>p4elak.ua</authorUrl>
	<creationDate>16.10.2012</creationDate>
	<copyright> </copyright>
	<license> </license>
	<authorEmail> </authorEmail>
	<version>1.2</version>
	<description> </description>
	<client>administrator</client>
	<files>
		<filename plugin="Security">Security.php</filename>
	</files>
	<config>
	<fields name="params">
		<fieldset name="settings" group="settings" label="Settings">
			<field name="token" type="text" size="45" label="token" description="define your access token" />
			<field name="url"  type="text"  size="45" label="url"   description="redirect url, if access token do not match. default url is the frontend" />
		</fieldset>
  </fields>
	</config>
	
</install>