Skip to content

Commit

Permalink
fix users not able to update own fields
Browse files Browse the repository at this point in the history
  • Loading branch information
cconard96 authored and trasher committed Dec 20, 2023
1 parent d28d54e commit d891305
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/User.php
Original file line number Diff line number Diff line change
Expand Up @@ -1029,7 +1029,7 @@ public function prepareInputForUpdate($input)
if (
count(array_intersect($protected_input_keys, array_keys($input))) > 0
&& !Session::isCron() // cron context is considered safe
&& $input['id'] !== Session::getLoginUserID()
&& (int) $input['id'] !== Session::getLoginUserID()
&& !$this->currentUserHaveMoreRightThan($input['id'])
) {
foreach ($protected_input_keys as $input_key) {
Expand Down

0 comments on commit d891305

Please sign in to comment.