mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-05-19 19:09:13 -04:00
Don't allow admins to delete the guest user. Fixes ticket #213
This commit is contained in:
@@ -63,7 +63,7 @@ class Admin_Users_Controller extends Controller {
|
||||
|
||||
public function delete_user($id) {
|
||||
access::verify_csrf();
|
||||
if ($id == user::active()->id) {
|
||||
if ($id == user::active()->id || $id == user::guest()->id) {
|
||||
access::forbidden();
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user