No role selfchange :)

Author: phpipam

app/settings/user-self-edit-submit.php

@@ -60,6 +60,9 @@
 elseif (strlen($_POST['password'])<8) { $Result->show("danger", "Invalid password - 8 characters required!", true); }
 else { $_POST['password'] = $User->crypt_user_pass ($_POST['password']); }
 
+// no role change
+if(isset($_POST['role'])) { unset($_POST['role']); }
+
 
 // add action
 $_POST['action'] = "edit";

app/settings/users.php

@@ -28,7 +28,7 @@
 if($fields_db!==false) {
  foreach ($fields_db as $f) {
  // no id
- if($f->Field!=="id" && $f->Field!=="password" && $f->Field!=="last_activity") {
+ if($f->Field!=="id" && $f->Field!=="password" && $f->Field!=="last_activity" && $f->Field!=="reload_page") {
  $tfields[] = $f->Field;
  }
  }