diff --git a/ext/user/main.php b/ext/user/main.php index 44fdda31..12d279d9 100644 --- a/ext/user/main.php +++ b/ext/user/main.php @@ -126,7 +126,7 @@ class UserPage extends Extension { $a["name"] = '%' . $_GET['username'] . '%'; } - if(@$_GET['email']) { + if($user->can('delete_user') && @$_GET['email']) { $q .= " AND SCORE_STRNORM(name) LIKE SCORE_STRNORM(:email)"; $a["email"] = '%' . $_GET['email'] . '%'; }