fix #3661: not logged in user: button to mark all as read leads to HTTP403 error (#3871)

* fix

* optimized

* Fix href

Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>

app/views/helpers/pagination.phtml

@@ -25,7 +25,7 @@
 		<a id="load_more" href="<?= Minz_Url::display($url_next) ?>">
 			<?= _t('gen.pagination.load_more') ?>
 		</a>
-	<?php } elseif ($url_mark_read) { ?>
+	<?php } elseif ($url_mark_read && FreshRSS_Auth::hasAccess()) { ?>
 		<button id="bigMarkAsRead"
 			class="as-link <?= FreshRSS_Context::$user_conf->reading_confirm ? 'confirm" disabled="disabled' : '' ?>"
 			form="mark-read-pagination"
@@ -36,9 +36,9 @@
 			<?= _t('gen.pagination.mark_all_read') ?>
 		</button>
 	<?php } else { ?>
-		<a id="bigMarkAsRead" href=".">
+		<div id="bigMarkAsRead">
 			<?= _t('gen.pagination.nothing_to_load') ?><br />
-		</a>
+		</div>
 	<?php } ?>
 	</li>
 </ul>