From c9a8f912634065b1d643022ada92da161e978a56 Mon Sep 17 00:00:00 2001 From: Michael Klier Date: Sat, 11 Oct 2008 15:36:40 +0200 Subject: FS#1137 don't allow admin user to delete himself darcs-hash:20081011133640-23886-b2bc0d25ccc41af3c4c9d1c387eef3efea16689a.gz --- lib/plugins/usermanager/admin.php | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'lib/plugins') diff --git a/lib/plugins/usermanager/admin.php b/lib/plugins/usermanager/admin.php index 9f1a200f6..67af14519 100644 --- a/lib/plugins/usermanager/admin.php +++ b/lib/plugins/usermanager/admin.php @@ -393,6 +393,11 @@ class admin_plugin_usermanager extends DokuWiki_Admin_Plugin { if (!is_array($selected) || empty($selected)) return false; $selected = array_keys($selected); + if(in_array($_SERVER['REMOTE_USER'], $selected)) { + msg("You can't delete yourself!", -1); + return false; + } + $count = $this->_auth->triggerUserMod('delete', array($selected)); if ($count == count($selected)) { $text = str_replace('%d', $count, $this->lang['delete_ok']); -- cgit v1.2.3