From 37bb1997b95cab1dd6dbda975d4ad5120a2ba72a Mon Sep 17 00:00:00 2001 From: ben Date: Mon, 4 Aug 2008 17:42:49 +0000 Subject: User changes to settings git-svn-id: https://code.elgg.org/elgg/trunk@1690 36083f99-b078-4883-b0ff-0f9b5a30f544 --- settings/statistics/index.php | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'settings/statistics/index.php') diff --git a/settings/statistics/index.php b/settings/statistics/index.php index 52546956d..87d84a604 100644 --- a/settings/statistics/index.php +++ b/settings/statistics/index.php @@ -14,7 +14,12 @@ require_once(dirname(dirname(dirname(__FILE__))) . "/engine/start.php"); // Make sure only valid admin users can see this - gatekeeper(); + gatekeeper(); + + // Make sure we don't open a security hole ... + if (!page_owner_entity()->canEdit()) { + set_page_owner($_SESSION['guid']); + } // Display main admin menu page_draw(elgg_echo("usersettings:statistics"),elgg_view_layout('two_column_left_sidebar','',elgg_view_title(elgg_echo("usersettings:statistics")) . elgg_view("usersettings/statistics"))); -- cgit v1.2.3