Users - Prevent modifying yourself via users.php, should use profile

itflow-org · Sep 30, 2023 · d02d2d4 · d02d2d4
1 parent 203ef85
commit d02d2d4
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/users.php b/users.php
@@ -143,6 +143,7 @@
                         <td class="text-center"><?php echo $mfa_status_display; ?></td>
                         <td><?php echo $last_login; ?></td>
                         <td>
+                            <?php if ($user_id !== $session_user_id) {   // Prevent modifying self ?>
                             <div class="dropdown dropleft text-center">
                                 <button class="btn btn-secondary btn-sm" type="button" data-toggle="dropdown">
                                     <i class="fas fa-ellipsis-h"></i>
@@ -166,6 +167,7 @@
                                     </a>
                                 </div>
                             </div>
+                            <?php } ?>
                         </td>
                     </tr>