From 2dec00e8e3cfe9e544cb8ee321b871feed68a73f Mon Sep 17 00:00:00 2001
From: Cassio de Campos <cassiopc@gmail.com>
Date: Thu, 26 Oct 2017 15:21:59 +0100
Subject: block pass change

---
 src/admin/user.php | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'src')

diff --git a/src/admin/user.php b/src/admin/user.php
index 0b01ee9..9da1c08 100644
--- a/src/admin/user.php
+++ b/src/admin/user.php
@@ -49,6 +49,7 @@ if (isset($_POST["username"]) && isset($_POST["userfullname"]) && isset($_POST["
 	$param['permitip'] = htmlspecialchars($_POST["userip"]);
 	$param['contest'] = $_SESSION["usertable"]["contestnumber"];
 	$param['changepass']='t';
+	if(isset($_POST['changepass']) && $_POST['changepass'] != 't') $param['changepass']='f';
 /*
 	$param['user'] = myhtmlspecialchars($_POST["usernumber"]);
 	$param['site'] = myhtmlspecialchars($_POST["usersitenumber"]);
@@ -470,6 +471,15 @@ echo $u["userdesc"]; } ?>" size="50" maxlength="300" />
 	  <input type="password" name="passwordn2" value="" size="20" maxlength="200" />
         </td>
       </tr>
+      <tr> 
+        <td width="35%" align=right>Allow password change:</td>
+        <td width="65%">
+		<select name="usermultilogin">
+		<option <?php if(isset($u) && $u["changepass"] == "t") echo "selected"; ?> value="t">Yes</option>
+		<option <?php if(!isset($u) || $u["changepass"] != "t") echo "selected"; ?> value="f">No</option>
+		</select>
+        </td>
+      </tr>
       <tr> 
         <td width="35%" align=right>Admin (this user) Password:</td>
         <td width="65%">
-- 
cgit v1.2.3