Documentation Support > Developers > ZAPAuth
Format: function ZAPauth($page, $var)
Explanation: This function works closely with ZAP Config to verify a page is authorized to use a particular command.
$page is the name of the current page (usually), and $var is the name of the command ('create', 'delete', etc.).
This function extracts the appropriate text variable from Site.ZAPConfig. If set, it checks to make sure the current page matches a page, group, or group* in the CSV list. If it is in the list, or the variable is not set it returns true. If not in the list it returns false.
This function is called in the PLUGIN EXTENSIONS section of the ZAP Engine to verify that a ZAPX command is enabled before calling the function. It is not called by the functions in ZAP Core.