Update user_df_change.php

zhblue · Jan 23, 2025 · 6a9f623 · 6a9f623
1 parent 003e537
commit 6a9f623
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/trunk/web/admin/user_df_change.php b/trunk/web/admin/user_df_change.php
@@ -4,6 +4,10 @@
 $user_id=$_GET['cid'];
 //echo htmlentities($user_id,ENT_QUOTE,'UTF-8');
 if(!isset($_SESSION[$OJ_NAME.'_'.'administrator'])) exit();
+if($_SESSION[$OJ_NAME."_user_id"]==$user_id){
+        echo "Can't defunct yourself!";
+        exit(0);
+}
 $sql="select `defunct`,email FROM `users` WHERE `user_id`=?";
 $result=pdo_query($sql,$user_id);
 $num=count($result);