From 9556ff5ea82ca0481c77d93e4ee1b3cc9ea14a39 Mon Sep 17 00:00:00 2001 From: Alec Harley Date: Mon, 6 Apr 2020 07:02:44 -0700 Subject: [PATCH] Set new users to standard access by default Prevents a user from creating themselves as superadmin --- html/newuserpost.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/newuserpost.php b/html/newuserpost.php index b3dad45..460760e 100644 --- a/html/newuserpost.php +++ b/html/newuserpost.php @@ -26,7 +26,7 @@ if($action=='create') { username = '".$mysqli->real_escape_string($_POST['useraccountname'])."', password_hash = '".$mysqli->real_escape_string($passwordEncrypted)."', password_salt = '".$mysqli->real_escape_string($passwordSalt)."', - accesslevel = '".$mysqli->real_escape_string($_POST['accesslevel'])."'"; + accesslevel = 'standard'"; if( $mysqli->query($query) ) { echo '