Minor Tweak: Enhanced delete own domain/user prevention.

This commit is contained in:
Nate Jones
2014-06-17 21:27:10 +00:00
parent f833cf3c91
commit 78efbfe4d1
2 changed files with 4 additions and 4 deletions

View File

@@ -184,8 +184,8 @@ else {
if (permission_exists('domain_edit')) {
echo "<a href='domain_edit.php?id=".$row['domain_uuid']."' alt='".$text['button-edit']."'>$v_link_label_edit</a>";
}
if (permission_exists('domain_delete') && $result_count > 1) {
if ($_SESSION["groups"][0]["domain_uuid"] != $row['domain_uuid']) {
if (permission_exists('domain_delete')) {
if ($_SESSION["groups"][0]["domain_uuid"] != $row['domain_uuid'] && $result_count > 1) {
echo "<a href='domain_delete.php?id=".$row['domain_uuid']."' alt='".$text['button-delete']."' onclick=\"return confirm('".$text['confirm-delete']."')\">$v_link_label_delete</a>";
}
else {

View File

@@ -163,8 +163,8 @@ echo " <td align=\"center\">\n";
if (permission_exists('user_edit')) {
echo "<a href='usersupdate.php?id=".$row['user_uuid']."' alt='".$text['button-edit']."'>$v_link_label_edit</a>";
}
if (permission_exists('user_delete') && $result_count > 1) {
if ($_SESSION["user"]["user_uuid"] != $row['user_uuid']) {
if (permission_exists('user_delete')) {
if ($_SESSION["user"]["user_uuid"] != $row['user_uuid'] && $result_count > 1) {
echo "<a href='userdelete.php?id=".$row['user_uuid']."' alt='".$text['button-delete']."' onclick=\"return confirm('".$text['confirm-delete']."')\">".$v_link_label_delete."</a>";
}
else {