Remove / add protection on config change (#4048)

Author: thom

interface/web/admin/system_config_edit.php

@@ -157,9 +157,9 @@ function onUpdateSave($sql) {
 
 		$new_config = $app->tform->encode($this->dataRecord, $section);
 		if($section == 'sites' && $new_config['client_protection'] != 'y' && $server_config_array['sites']['client_protection'] == 'y') {
-		  $app->db->query("UPDATE `web_domain` SET `sys_perm_group` = 'riud' WHERE `added_by` = 'admin'");
+		  $app->db->query("UPDATE `web_domain` SET `sys_userid` = (select `userid` FROM `sys_user` WHERE `default_group` = `web_domain`.`sys_groupid`), `sys_perm_group` = 'riud' WHERE `added_by` = 'admin'");
 		} elseif($section == 'sites' && $new_config['client_protection'] != 'n' && $server_config_array['sites']['client_protection'] == 'n') {
-			$app->db->query("UPDATE `web_domain` SET `sys_perm_group` = 'ru' WHERE `added_by` = 'admin'");
+			$app->db->query("UPDATE `web_domain` SET `sys_userid` = 1, `sys_perm_group` = 'ru' WHERE `added_by` = 'admin'");
 		}
 		if($section == 'sites' && $new_config['vhost_subdomains'] != 'y' && $server_config_array['sites']['vhost_subdomains'] == 'y') {
 			// check for existing vhost subdomains, if found the mode cannot be disabled