[geeklog-cvs] geeklog-1.3/public_html usersettings.php,1.83,1.84

[dhaun at geeklog.net]

Update of /usr/cvs/geeklog/geeklog-1.3/public_html
In directory geeklog_prod:/tmp/cvs-serv1203

Modified Files:
	usersettings.php 
Log Message:
Added check for uid > 1


Index: usersettings.php
===================================================================
RCS file: /usr/cvs/geeklog/geeklog-1.3/public_html/usersettings.php,v
retrieving revision 1.83
retrieving revision 1.84
diff -C2 -d -r1.83 -r1.84
*** usersettings.php	23 Jan 2004 09:42:57 -0000	1.83
--- usersettings.php	23 Jan 2004 10:09:52 -0000	1.84
***************
*** 192,196 ****
  * Ask user for confirmation to delete his/her account.
  *
! * @param    int      form_reqid   request id
  * @return   string   confirmation form
  *
--- 192,196 ----
  * Ask user for confirmation to delete his/her account.
  *
! * @param    string   form_reqid   request id
  * @return   string   confirmation form
  *
***************
*** 238,242 ****
  * Delete an account (keep in sync with delete_user() in admin/user.php).
  *
! * @param    form_reqid   string   request id
  * @return   string   redirection to main page (+ success msg)
  *
--- 238,242 ----
  * Delete an account (keep in sync with delete_user() in admin/user.php).
  *
! * @param    string   form_reqid   request id
  * @return   string   redirection to main page (+ success msg)
  *
***************
*** 988,992 ****
          break;
      case 'confirmdelete':
!         if ($_CONF['allow_account_delete'] == 1) {
              $accountId = COM_applyFilter ($HTTP_POST_VARS['account_id']);
              if (!empty ($accountId)) {
--- 988,992 ----
          break;
      case 'confirmdelete':
!         if (($_CONF['allow_account_delete'] == 1) && ($_USER['uid'] > 1)) {
              $accountId = COM_applyFilter ($HTTP_POST_VARS['account_id']);
              if (!empty ($accountId)) {
***************
*** 1000,1004 ****
          break;
      case 'deleteconfirmed':
!         if ($_CONF['allow_account_delete'] == 1) {
              $accountId = COM_applyFilter ($HTTP_POST_VARS['account_id']);
              if (!empty ($accountId)) {
--- 1000,1004 ----
          break;
      case 'deleteconfirmed':
!         if (($_CONF['allow_account_delete'] == 1) && ($_USER['uid'] > 1)) {
              $accountId = COM_applyFilter ($HTTP_POST_VARS['account_id']);
              if (!empty ($accountId)) {