Bug fix: protect parameters changes in profile.php (checking current user correspondi...

git-svn-id: https://semanticscuttle.svn.sourceforge.net/svnroot/semanticscuttle/trunk@156 b3834d28-1941-0410-a4f8-b48e95affb8f

diff --git a/profile.php b/profile.php
index d834144b7807a45b8ecb00ca061790c222f5d2f9..fe86daa7ad20ee1afefea7bcc29f18447cca23af 100644 (file)
--- a/profile.php
+++ b/profile.php
@@ -65,7 +65,7 @@ $tplVars['subtitle'] = $title;
 $tplVars['user'] = $user;
 $tplVars['userid'] = $userid;
 
-if (isset($_POST['submitted'])) {
+if (isset($_POST['submitted']) && $currentUserID == $userid) {
     $error = false;
     $detPass = trim($_POST['pPass']);
     $detPassConf = trim($_POST['pPassConf']);