stian/gallery3
1
0
Fork 0
mirror of https://github.com/Pathduck/gallery3.git synced 2026-08-29 10:26:46 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

Don't let the admin delete themselves, either. That would be bad.

Browse Source
This commit is contained in:
Bharat Mediratta
2008-12-25 02:48:07 +00:00
parent 95ec6a8f57
commit 2c6a80fb76
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/user/controllers/users.php
+1 -1
View File
@@ -82,7 +82,7 @@ class Users_Controller extends REST_Controller {
* @see REST_Controller::_delete($resource)
*/
public function _delete($user) {
if (!user::active()->admin) {
if (!user::active()->admin || $user->id == user::active()->id ) {
access::forbidden();
}
// Prevent CSRF