0ct0pu5/webmum
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #25 from ohartl/patch-dont-delete-admin

Browse source 
Fix deletion of admin users or their domains
This commit is contained in:
Thomas Leister 2016-02-16 20:01:24 +01:00
commit 4d3e8fc613
2 changed files with 10 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
include/php/pages/admin/deletedomain.php
View file

@ -18,9 +18,15 @@ if(isset($_POST['confirm'])){
$confirm = $_POST['confirm'];
if($confirm === "yes"){
$admin_domains = array();
foreach($admins as $admin) {
$parts = explode("@", $admin);
$admin_domains[] = $parts[1];
}
// Check if admin domain is affected
$admin_domain = explode("@", ADMIN_EMAIL)[1];
if($admin_domain !== $domain){
if(!in_array($domain, $admin_domains)){
$sql = "DELETE FROM `".DBT_DOMAINS."` WHERE `".DBC_DOMAINS_ID."` = '$id'";
if(!$result = $db->query($sql)){

3
include/php/pages/admin/deleteuser.php
View file

@ -22,7 +22,8 @@ if(isset($_POST['confirm'])){
$confirm = $_POST['confirm'];
if($confirm === "yes"){
if($mailaddress !== ADMIN_EMAIL){
// Check if admin is affected
if (!in_array($mailaddress, $admins)) {
$sql = "DELETE FROM `".DBT_USERS."` WHERE `".DBC_USERS_ID."` = '$id'";
if(!$result = $db->query($sql)){