From d02d2d4e4a3e9e0f2931851a434bf56b6003a465 Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Sat, 30 Sep 2023 20:32:34 +0100
Subject: [PATCH] Users - Prevent modifying yourself via users.php, should use
 profile

---
 users.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/users.php b/users.php
index 793802ca1..8f552569b 100644
--- a/users.php
+++ b/users.php
@@ -143,6 +143,7 @@
                         <td class="text-center"><?php echo $mfa_status_display; ?></td>
                         <td><?php echo $last_login; ?></td>
                         <td>
+                            <?php if ($user_id !== $session_user_id) {   // Prevent modifying self ?>
                             <div class="dropdown dropleft text-center">
                                 <button class="btn btn-secondary btn-sm" type="button" data-toggle="dropdown">
                                     <i class="fas fa-ellipsis-h"></i>
@@ -166,6 +167,7 @@
                                     </a>
                                 </div>
                             </div>
+                            <?php } ?>
                         </td>
                     </tr>