Major access fix.

git-svn-id: https://code.elgg.org/elgg/trunk@1809 36083f99-b078-4883-b0ff-0f9b5a30f544

2 files changed, 4 insertions, 2 deletions

diff --git a/engine/lib/group.php b/engine/lib/group.php
index a8d2d570e..da6876be9 100644
--- a/engine/lib/group.php
+++ b/engine/lib/group.php
@@ -230,7 +230,8 @@
 		 */
 		public function isMember($user = 0)
 		{

-			if (!($user instanceof ElggUser)) $user = $_SESSION['user'];
+			if (!($user instanceof ElggUser)) $user = $_SESSION['user'];

+			if (!($_SESSION['user'] instanceof ElggUser)) return false;
 			return is_group_member($this->getGUID(), $user->getGUID());
 		}
 		
diff --git a/engine/lib/users.php b/engine/lib/users.php
index 690a582d7..80e9286fb 100644
--- a/engine/lib/users.php
+++ b/engine/lib/users.php
@@ -1175,7 +1175,8 @@
 

 		// Change this to set the number of users that display on the search page

 		$threshold = 4;

-		

+

+		if (!get_input('offset'))

 		if ($users = search_for_user($tag,$threshold)) {

 			

 			$countusers = search_for_user($tag,0,0,"",true);