From b154b424bf9ab66b7051152a9eb98c97cc8b899d Mon Sep 17 00:00:00 2001
From: f0o <f0o@librenms.org>
Date: Thu, 28 May 2015 12:44:23 +0000
Subject: [PATCH] Do not allow demo-user to delete other users

---
 html/pages/deluser.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/html/pages/deluser.inc.php b/html/pages/deluser.inc.php
index 924c4005b..653c7a78b 100644
--- a/html/pages/deluser.inc.php
+++ b/html/pages/deluser.inc.php
@@ -2,7 +2,7 @@
 
 echo('<div style="margin: 10px;">');
 
-if ($_SESSION['userlevel'] < '10') { include("includes/error-no-perm.inc.php"); } else
+if ($_SESSION['userlevel'] < 10 || $_SESSION['userlevel'] > 10) { include("includes/error-no-perm.inc.php"); } else
 {
   echo("<h3>Delete User</h3>");