--- D:/www/photoalbum/backup/main.php	Mon Apr 13 21:39:20 2009
+++ D:/www/photoalbum/phpAlbum_v0.4.1.14.fix05/main.php	Mon Apr 13 21:38:44 2009
@@ -2578,7 +2578,14 @@
 if($this_is_cachable){ob_start();}
 /*testing for password */
 if($cmd=="phpinfo"){
-	phpinfo();
+ if(isset($pa_user["groups"]["superuser"]))
+ {
+	 phpinfo();
+ }
+ else
+ {
+	 echo "Command phpinfo not allowed for you.";
+ }
 }else if($cmd=="album"){
 	write_log();
         $cache_this_doc=generate_album($var1,$var3);