Merge pull request #727 from wrongecho/settings-user-prevent-self-mod

Users - Prevent modifying yourself via users.php, should use profile
2023-10-01 22:44:22 -04:00
parent 203ef85997 d02d2d4e4a
commit 5cda6156d4
1 changed files with 2 additions and 0 deletions
--- a/users.php
+++ b/users.php
@@ -143,6 +143,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
                        <td class="text-center"><?php echo $mfa_status_display; ?></td>
                        <td><?php echo $last_login; ?></td>
                        <td>
+                            <?php if ($user_id !== $session_user_id) {   // Prevent modifying self ?>
                            <div class="dropdown dropleft text-center">
                                <button class="btn btn-secondary btn-sm" type="button" data-toggle="dropdown">
                                    <i class="fas fa-ellipsis-h"></i>
@@ -166,6 +167,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
                                    </a>
                                </div>
                            </div>
+                            <?php } ?>
                        </td>
                    </tr>