From 02483e4c949609a848626fc4e5b17e723fb429b9 Mon Sep 17 00:00:00 2001 From: Fabio Comuni Date: Mon, 12 Mar 2012 15:08:41 +0100 Subject: [PATCH] widgets: only local user can change settings --- widgets/widgets.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/widgets/widgets.php b/widgets/widgets.php index 27cabfd6..47a6e48a 100755 --- a/widgets/widgets.php +++ b/widgets/widgets.php @@ -19,7 +19,8 @@ function widgets_uninstall() { function widgets_settings_post(){ - + if(! local_user()) + return; if (isset($_POST['widgets-submit'])){ del_pconfig(local_user(), 'widgets', 'key');