Also ich habs jetzt nicht getestet und hoffe ich hab nix durcheinander gehauen, aber ansonsten mal in der admin/user.php ganz am Ende bei
# einen user komplett loeschen
case 'deleteUser' :
$uid = $menu->get(2);
if ( $uid <> 1 AND ) {
db_query("DELETE FROM prefix_user WHERE id = ".$uid);
db_query("DELETE FROM prefix_userfields WHERE uid = ".$uid);
db_query("DELETE FROM prefix_groupusers WHERE uid = ".$uid);
db_query("DELETE FROM prefix_modulerights WHERE uid = ".$uid);
db_query("DELETE FROM prefix_pm WHERE eid = ".$uid);
?><html><head><script language="JavaScript" type="text/javascript"><!--
function closeThisWindow() { opener.location.reload(); opener.focus(); window.close(); } closeThisWindow()
//--></script></head><body></body></html><?php
}
break;
mit
# einen user komplett loeschen
case 'deleteUser' :
$uid = $menu->get(2);
$urecht = db_result(db_query("SELECT recht FROM prefix_user WHERE id = ".$uid),0);
if ( $uid <> 1 OR ($_SESSION['authid'] == 1 AND $uid <> 1) OR $_SESSION['authright'] < $urecht ) {
db_query("DELETE FROM prefix_user WHERE id = ".$uid);
db_query("DELETE FROM prefix_userfields WHERE uid = ".$uid);
db_query("DELETE FROM prefix_groupusers WHERE uid = ".$uid);
db_query("DELETE FROM prefix_modulerights WHERE uid = ".$uid);
db_query("DELETE FROM prefix_pm WHERE eid = ".$uid);
?><html><head><script language="JavaScript" type="text/javascript"><!--
function closeThisWindow() { opener.location.reload(); opener.focus(); window.close(); } closeThisWindow()
//--></script></head><body></body></html><?php
}
break;
ersetzen.
Dann sollte jeder nur noch User löschen können die ein niederigeres Recht als er selbst haben, Ausnahme ist natürlich der Admin mit ID 1.