From c1bbbaca1b1aafb156b3bec8f25db73213acb763 Mon Sep 17 00:00:00 2001
From: Neil Lathwood <neil@lathwood.co.uk>
Date: Mon, 16 Feb 2015 23:55:36 +0000
Subject: [PATCH] Locked down edit user page as well

---
 html/pages/edituser.inc.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/html/pages/edituser.inc.php b/html/pages/edituser.inc.php
index 0626f1ecf..635ec3f62 100644
--- a/html/pages/edituser.inc.php
+++ b/html/pages/edituser.inc.php
@@ -236,6 +236,10 @@ if ($_SESSION['userlevel'] != '10') { include("includes/error-no-perm.inc.php");
 
   } elseif ($vars['user_id'] && $vars['edit']) {
 
+      if($_SESSION['userlevel'] == 10) {
+          demo_account();
+      } else {
+
     if(!empty($vars['new_level']))
     {
       if($vars['can_modify_passwd'] == 'on') {
@@ -368,6 +372,7 @@ if ($_SESSION['userlevel'] != '10') { include("includes/error-no-perm.inc.php");
     } else {
       echo print_error("Authentication method doesn't support updating users");
     }
+      }
   } else {
 
     $user_list = get_userlist();