Whoops ... don't put unenrol button unless the user is the current user!

diff --git a/user/view.php b/user/view.php
index 499e29336ca9c7b3270594e4a55ad0a87c7bd1c1..e78c2eaf1a705102be6b743dca17b13e187b07df 100644 (file)
--- a/user/view.php
+++ b/user/view.php
@@ -103,12 +103,14 @@
     echo "</TD></TR></TABLE></TABLE>";
 
 //  Print other functions
-    echo "<CENTER><TABLE ALIGN=CENTER><TR>";
-    echo "<TD NOWRAP><P><FORM ACTION=\"../course/unenrol.php\" METHOD=GET>";
-    echo "<INPUT type=hidden name=id value=\"$course->id\">";
-    echo "<INPUT type=submit value=\"Unenrol me from $course->shortname\">";
-    echo "</FORM></P></TD>";
-    echo "</TR></TABLE></CENTER>\n";
+    if ($id == $USER->id) {
+        echo "<CENTER><TABLE ALIGN=CENTER><TR>";
+        echo "<TD NOWRAP><P><FORM ACTION=\"../course/unenrol.php\" METHOD=GET>";
+        echo "<INPUT type=hidden name=id value=\"$course->id\">";
+        echo "<INPUT type=submit value=\"Unenrol me from $course->shortname\">";
+        echo "</FORM></P></TD>";
+        echo "</TR></TABLE></CENTER>\n";
+    }
 
     print_footer($course);