by Colin Fraser.
It is a bit of a crock, that is a misdirection. If you add in the right URL, which includes the PHP edit command, you can edit, but so what? Try it if the Role you use does not have permission to do edit. If that works then I would be surprised. But it remains, once you enter the correct url, you are turning editing on - whether you click the button or not. What is the issue here?