badmanners/shimmie2
badmanners/shimmie2
Archived
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

safety

Browse source
This commit is contained in:
Shish 2017-09-17 19:11:51 +01:00
parent 5763b77e2b
commit 186ea55348
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ext/user/main.php
View file

@ -126,7 +126,7 @@ class UserPage extends Extension {
$a["name"] = '%' . $_GET['username'] . '%';
}
if(@$_GET['email']) {
if($user->can('delete_user') && @$_GET['email']) {
$q .= " AND SCORE_STRNORM(name) LIKE SCORE_STRNORM(:email)";
$a["email"] = '%' . $_GET['email'] . '%';
}