Prevent other admins from accessing edit user page for default admin

Kristan Kenney · Kristan Kenney · commit 2757279d6047 · 2021-03-14T18:59:03.000-03:00
diff --git a/web/edit/user/index.php b/web/edit/user/index.php
@@ -23,7 +23,7 @@
 }
 
 // Prevent other users with admin privileges from editing properties of default 'admin' user
-if (($_SESSION['userContext'] == 'admin') && (isset($_SESSION['look']) && ($user == 'admin'))) {
+if (($_SESSION['userContext'] == 'admin') && (isset($_SESSION['look'])) && ($user == 'admin') || ($_SESSION['userContext'] == 'admin') && (!isset($_SESSION['look'])) && ($user == 'admin') && ($_SESSION['user'] != 'admin')) {
     header("Location: /list/user/");
     exit;
 }

Original file line number	Diff line number	Diff line change
`@@ -23,7 +23,7 @@`
`23`	`23`	`}`
`24`	`24`
`25`	`25`	`// Prevent other users with admin privileges from editing properties of default 'admin' user`
`26`		`-if (($_SESSION['userContext'] == 'admin') && (isset($_SESSION['look']) && ($user == 'admin'))) {`
	`26`	`+if (($_SESSION['userContext'] == 'admin') && (isset($_SESSION['look'])) && ($user == 'admin') \|\| ($_SESSION['userContext'] == 'admin') && (!isset($_SESSION['look'])) && ($user == 'admin') && ($_SESSION['user'] != 'admin')) {`
`27`	`27`	`header("Location: /list/user/");`
`28`	`28`	`exit;`
`29`	`29`	`}`