Disallow accessing FirstTimeSetupOptionsForm once first time setup is completed

diff --git a/wcfsetup/install/files/lib/acp/form/FirstTimeSetupOptionsForm.class.php b/wcfsetup/install/files/lib/acp/form/FirstTimeSetupOptionsForm.class.php
index 8783463a38fb9e9f33a43727a5c295bd15ea4d4c..0beab982d5c38d2e82978e4b334a1936b6df8805 100644 (file)
--- a/wcfsetup/install/files/lib/acp/form/FirstTimeSetupOptionsForm.class.php
+++ b/wcfsetup/install/files/lib/acp/form/FirstTimeSetupOptionsForm.class.php
@@ -4,6 +4,7 @@ namespace wcf\acp\form;
 
 use wcf\data\option\Option;
 use wcf\data\option\OptionAction;
+use wcf\system\exception\PermissionDeniedException;
 use wcf\system\option\OptionHandler;
 use wcf\system\request\LinkHandler;
 use wcf\system\WCF;
@@ -49,6 +50,18 @@ final class FirstTimeSetupOptionsForm extends AbstractOptionListForm
         'package_server_auth_code',
     ];
 
+    /**
+     * @inheritDoc
+     */
+    public function readParameters()
+    {
+        parent::readParameters();
+
+        if (\FIRST_TIME_SETUP_STATE == -1) {
+            throw new PermissionDeniedException();
+        }
+    }
+
     /**
      * @inheritDoc
      */