]> gitweb.fluxo.info Git - semanticscuttle.git/commitdiff
Bug fix: protect parameters changes in profile.php (checking current user correspondi...
authormensonge <mensonge@b3834d28-1941-0410-a4f8-b48e95affb8f>
Fri, 14 Nov 2008 11:37:12 +0000 (11:37 +0000)
committermensonge <mensonge@b3834d28-1941-0410-a4f8-b48e95affb8f>
Fri, 14 Nov 2008 11:37:12 +0000 (11:37 +0000)
git-svn-id: https://semanticscuttle.svn.sourceforge.net/svnroot/semanticscuttle/trunk@156 b3834d28-1941-0410-a4f8-b48e95affb8f

profile.php

index d834144b7807a45b8ecb00ca061790c222f5d2f9..fe86daa7ad20ee1afefea7bcc29f18447cca23af 100644 (file)
@@ -65,7 +65,7 @@ $tplVars['subtitle'] = $title;
 $tplVars['user'] = $user;
 $tplVars['userid'] = $userid;
 
-if (isset($_POST['submitted'])) {
+if (isset($_POST['submitted']) && $currentUserID == $userid) {
     $error = false;
     $detPass = trim($_POST['pPass']);
     $detPassConf = trim($_POST['pPassConf']);