diff --git a/mozilla/webtools/update/developers/commentsmanager.php b/mozilla/webtools/update/developers/commentsmanager.php
index 53d80c8b75a..cef08913527 100755
--- a/mozilla/webtools/update/developers/commentsmanager.php
+++ b/mozilla/webtools/update/developers/commentsmanager.php
@@ -16,6 +16,11 @@ if ($_SESSION["level"] !=="admin" and $_SESSION["level"] !=="editor") {
 <TITLE>Mozilla Update :: Developer Control Panel :: Comments Manager</TITLE>
 <?php
 include"$page_header";
+
+if ($function=="flaggedcomments") {
+    $skipcomments = true;
+}
+
 include"inc_sidebar.php";
 ?>
 <?php
diff --git a/mozilla/webtools/update/developers/core/sessionconfig.php b/mozilla/webtools/update/developers/core/sessionconfig.php
index e2c8d3c4bfe..ba5111b4cf1 100755
--- a/mozilla/webtools/update/developers/core/sessionconfig.php
+++ b/mozilla/webtools/update/developers/core/sessionconfig.php
@@ -5,7 +5,7 @@ session_start();
 
 if ($_SESSION["logoncheck"] !=="YES" && strpos($_SERVER["SCRIPT_NAME"],"login.php")===false && strpos($_SERVER["SCRIPT_NAME"],"index.php")===false) {
 $return_path="developers/index.php";
-header("Location: http://$sitehostname/$return_path");
+header("Location: http://$_SERVER[SERVER_NAME]/$return_path");
 exit;
 }
 ?>
\ No newline at end of file
diff --git a/mozilla/webtools/update/developers/itemoverview.php b/mozilla/webtools/update/developers/itemoverview.php
index ab7928fe6a8..265d61287c3 100755
--- a/mozilla/webtools/update/developers/itemoverview.php
+++ b/mozilla/webtools/update/developers/itemoverview.php
@@ -9,6 +9,22 @@ require"core/sessionconfig.php";
 <?php
 include"$page_header";
 include"inc_sidebar.php";
+
+//Kill access to items this user doesn't own...
+if ($_SESSION["level"] !=="admin" and $_SESSION["level"] !=="editor") {
+
+    $id = escape_string($_GET["id"]);
+    if (!$id) {$id = escape_string($_POST["id"]); }
+    $sql = "SELECT `UserID` from `authorxref` TAX WHERE `ID` = '$id' AND `UserID` = '$_SESSION[uid]' LIMIT 1";
+    $sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
+    if (mysql_num_rows($sql_result)=="0") {
+    echo"<h1>Access Denied</h1>\n";
+    echo"You do not have access to this item.";
+    include"$page_footer";
+    echo"</body></html>\n";
+    exit;
+    }
+}
 ?>
 <?php
 $id = escape_string($_GET["id"]);
diff --git a/mozilla/webtools/update/developers/listmanager.php b/mozilla/webtools/update/developers/listmanager.php
index c39f16a462e..697aa7f170e 100755
--- a/mozilla/webtools/update/developers/listmanager.php
+++ b/mozilla/webtools/update/developers/listmanager.php
@@ -10,6 +10,22 @@ $function = $_GET["function"];
 <?php
 include"$page_header";
 include"inc_sidebar.php";
+
+//Kill access to items this user doesn't own...
+if ($_SESSION["level"] !=="admin" and $_SESSION["level"] !=="editor") {
+
+    $id = escape_string($_GET["id"]);
+    if (!$id) {$id = escape_string($_POST["id"]); }
+    $sql = "SELECT `UserID` from `authorxref` TAX WHERE `ID` = '$id' AND `UserID` = '$_SESSION[uid]' LIMIT 1";
+    $sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
+    if (mysql_num_rows($sql_result)=="0") {
+    echo"<h1>Access Denied</h1>\n";
+    echo"You do not have access to this item.";
+    include"$page_footer";
+    echo"</body></html>\n";
+    exit;
+    }
+}
 ?>
 
 <?php
diff --git a/mozilla/webtools/update/developers/previews.php b/mozilla/webtools/update/developers/previews.php
index 087de8d8b17..9178f03f277 100755
--- a/mozilla/webtools/update/developers/previews.php
+++ b/mozilla/webtools/update/developers/previews.php
@@ -10,6 +10,22 @@ require"core/sessionconfig.php";
 include"$page_header";
 include"inc_sidebar.php";
 
+//Kill access to items this user doesn't own...
+if ($_SESSION["level"] !=="admin" and $_SESSION["level"] !=="editor") {
+
+    $id = escape_string($_GET["id"]);
+    if (!$id) {$id = escape_string($_POST["id"]); }
+    $sql = "SELECT `UserID` from `authorxref` TAX WHERE `ID` = '$id' AND `UserID` = '$_SESSION[uid]' LIMIT 1";
+    $sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
+    if (mysql_num_rows($sql_result)=="0") {
+    echo"<h1>Access Denied</h1>\n";
+    echo"You do not have access to this item.";
+    include"$page_footer";
+    echo"</body></html>\n";
+    exit;
+    }
+}
+
 //List Page Preview Variables
 $preview_width = "200";
 $preview_height = "150";
diff --git a/mozilla/webtools/update/developers/reviewsmanager.php b/mozilla/webtools/update/developers/reviewsmanager.php
index 603972b98b9..62c6c1bda19 100755
--- a/mozilla/webtools/update/developers/reviewsmanager.php
+++ b/mozilla/webtools/update/developers/reviewsmanager.php
@@ -11,7 +11,15 @@ $function = $_GET["function"];
 include"$page_header";
 include"inc_sidebar.php";
 ?>
-
+<?php
+if ($_SESSION["level"] !=="admin" and $_SESSION["level"] !=="editor") {
+    echo"<h1>Access Denied</h1>\n";
+    echo"You do not have access to the Editor Reviews Manager";
+    include"$page_footer";
+    echo"</body></html>\n";
+    exit;
+}
+?>
 <?php
 if (!$function) {
 $typearray = array("E"=>"Extensions","T"=>"Themes");