Bug 141557 - modification to user deletion code in editusers.cgi - prevent…

Bug 141557 - modification to user deletion code in editusers.cgi - prevent allowuserdeletion being bypassed. Patch by gerv; 2xr=myk.

Bug 141557 - modification to user deletion code in editusers.cgi - prevent…
e3fe36b5 · gerv%gerv.net · a4185828 · e3fe36b5
Commit e3fe36b5 authored May 02, 2002 by gerv%gerv.net
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

editusers.cgi editusers.cgi +2 -0

No files found.
--- a/editusers.cgi
+++ b/editusers.cgi
@@ -528,6 +528,7 @@ if ($action eq 'del') {
    if (!$candelete) {
        print "Sorry, deleting users isn't allowed.";
        PutTrailer();
+        exit;
    }
    if (!$editall) {
        print "Sorry, you don't have permissions to delete users.";
@@ -657,6 +658,7 @@ if ($action eq 'delete') {
    if (!$candelete) {
        print "Sorry, deleting users isn't allowed.";
        PutTrailer();
+        exit;
    }
    if (!$editall) {
        print "Sorry, you don't have permissions to delete users.";