From 02483e4c949609a848626fc4e5b17e723fb429b9 Mon Sep 17 00:00:00 2001
From: Fabio Comuni <fabrix.xm@gmail.com>
Date: Mon, 12 Mar 2012 15:08:41 +0100
Subject: [PATCH] widgets: only local user can change settings
---
widgets/widgets.php | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/widgets/widgets.php b/widgets/widgets.php
index 27cabfd6..47a6e48a 100755
--- a/widgets/widgets.php
+++ b/widgets/widgets.php
@@ -19,7 +19,8 @@ function widgets_uninstall() {
function widgets_settings_post(){
-
+ if(! local_user())
+ return;
if (isset($_POST['widgets-submit'])){
del_pconfig(local_user(), 'widgets', 'key');