From: gerv%gerv.net <>
Date: Thu, 2 May 2002 03:54:10 +0000 (+0000)
Subject: Bug 141557 - modification to user deletion code in editusers.cgi - prevent allowuserd... 
X-Git-Tag: bugzilla-2.16rc1~37
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e3fe36b5ef56c20b3c3fa4edea99c5de2febb9a2;p=thirdparty%2Fbugzilla.git

Bug 141557 - modification to user deletion code in editusers.cgi - prevent allowuserdeletion being bypassed. Patch by gerv; 2xr=myk.
---

diff --git a/editusers.cgi b/editusers.cgi
index ad124032ef..06c293e2d8 100755
--- a/editusers.cgi
+++ b/editusers.cgi
@@ -528,6 +528,7 @@ if ($action eq 'del') {
     if (!$candelete) {
         print "Sorry, deleting users isn't allowed.";
         PutTrailer();
+        exit;
     }
     if (!$editall) {
         print "Sorry, you don't have permissions to delete users.";
@@ -657,6 +658,7 @@ if ($action eq 'delete') {
     if (!$candelete) {
         print "Sorry, deleting users isn't allowed.";
         PutTrailer();
+        exit;
     }
     if (!$editall) {
         print "Sorry, you don't have permissions to delete users.";