From 9e2a7bc23b0b134af97f85f1a2daaf8c02abcb87 Mon Sep 17 00:00:00 2001
From: Awilum <awilum@msn.com>
Date: Sat, 23 Nov 2013 15:19:12 +0400
Subject: [PATCH] #158 deleting users - fixed by Oleg Gatseluk

---
 plugins/box/users/users.admin.php              | 2 +-
 plugins/box/users/views/backend/index.view.php | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/plugins/box/users/users.admin.php b/plugins/box/users/users.admin.php
index fd1fa6c..e073ca7 100755
--- a/plugins/box/users/users.admin.php
+++ b/plugins/box/users/users.admin.php
@@ -185,7 +185,7 @@ class UsersAdmin extends Backend
                 // -------------------------------------
                 case "delete":
 
-                    if (Session::exists('user_role') && in_array(Session::get('user_role'), array('admin'))) {
+                    if (Session::exists('user_role') && in_array(Session::get('user_role'), array('admin')) && (int)$_SESSION['user_id'] != (int)Request::get('user_id')) {
 
                         if (Security::check(Request::get('token'))) {
 
diff --git a/plugins/box/users/views/backend/index.view.php b/plugins/box/users/views/backend/index.view.php
index 1347e77..be800b5 100755
--- a/plugins/box/users/views/backend/index.view.php
+++ b/plugins/box/users/views/backend/index.view.php
@@ -44,9 +44,12 @@
         <td>
             <div class="pull-right">
             <?php echo Html::anchor(__('Edit', 'users'), 'index.php?id=users&action=edit&user_id='.$user['id'], array('class' => 'btn btn-small')); ?>
-            <?php echo Html::anchor(__('Delete', 'users'),
+            <?php
+                if ((int)$user['id'] != (int)$_SESSION['user_id']) {
+                    echo Html::anchor(__('Delete', 'users'),
                        'index.php?id=users&action=delete&user_id='.$user['id'].'&token='.Security::token(),
                        array('class' => 'btn btn-small', 'onclick' => "return confirmDelete('".__('Delete user: :user', 'users', array(':user' => Html::toText($user['login'])))."')"));
+                }
              ?>
              </div>
         </td>