diff --git a/admin/manage_users.php b/admin/manage_users.php index 30e2c619..cdce6e1d 100644 --- a/admin/manage_users.php +++ b/admin/manage_users.php @@ -404,12 +404,11 @@ while ($myuser = hesk_dbFetchAssoc($res)) $myuser['isadmin'] = ''.$hesklang['no'].''; } - /* Deleting user with ID 1 (default administrator) is not allowed */ - if ($myuser['id'] == 1) + /* Deleting user with ID 1 (default administrator) is not allowed. Also don't allow the logged in user to be deleted or inactivated */ + if ($myuser['id'] == 1 || $myuser['id'] == $_SESSION['id']) { $remove_code = ' '; - } - else + } else { $remove_code = ' '; } @@ -432,7 +431,7 @@ while ($myuser = hesk_dbFetchAssoc($res)) } $activeMarkup = ''; - if ($myuser['id'] != $_SESSION['id']) { + if ($myuser['id'] != $_SESSION['id'] && $myuser['id'] != 1) { /* Is the user active? */ if ($myuser['active']) { $activeMarkup = '';