浏览代码

Minor Tweak: Enhanced delete own domain/user prevention.

Nate Jones 11 年之前
父节点
当前提交
b1b3357fc6
共有 2 个文件被更改,包括 4 次插入4 次删除
  1. 2 2
      core/domain_settings/domains.php
  2. 2 2
      core/users/users.php

+ 2 - 2
core/domain_settings/domains.php

@@ -184,8 +184,8 @@ else {
 			if (permission_exists('domain_edit')) {
 				echo "<a href='domain_edit.php?id=".$row['domain_uuid']."' alt='".$text['button-edit']."'>$v_link_label_edit</a>";
 			}
-			if (permission_exists('domain_delete') && $result_count > 1) {
-				if ($_SESSION["groups"][0]["domain_uuid"] != $row['domain_uuid']) {
+			if (permission_exists('domain_delete')) {
+				if ($_SESSION["groups"][0]["domain_uuid"] != $row['domain_uuid'] && $result_count > 1) {
 					echo "<a href='domain_delete.php?id=".$row['domain_uuid']."' alt='".$text['button-delete']."' onclick=\"return confirm('".$text['confirm-delete']."')\">$v_link_label_delete</a>";
 				}
 				else {

+ 2 - 2
core/users/users.php

@@ -163,8 +163,8 @@ echo "	<td align=\"center\">\n";
 				if (permission_exists('user_edit')) {
 					echo "<a href='usersupdate.php?id=".$row['user_uuid']."' alt='".$text['button-edit']."'>$v_link_label_edit</a>";
 				}
-				if (permission_exists('user_delete') && $result_count > 1) {
-					if ($_SESSION["user"]["user_uuid"] != $row['user_uuid']) {
+				if (permission_exists('user_delete')) {
+					if ($_SESSION["user"]["user_uuid"] != $row['user_uuid'] && $result_count > 1) {
 						echo "<a href='userdelete.php?id=".$row['user_uuid']."' alt='".$text['button-delete']."' onclick=\"return confirm('".$text['confirm-delete']."')\">".$v_link_label_delete."</a>";
 					}
 					else {